An approach to trust management challenges for critical infrastructures
CRITIS'07 Proceedings of the Second international conference on Critical Information Infrastructures Security
| Hi-index | 0.00 |
The diversity of the kinds of interactions between principals in distributed computing systems has expanded rapidly in recent years. However, the state of the art in trust management is not yet sufficient to support this diversity of interactions. This dissertation presents a rationale and design for much richer trust management than it is possible today. To do so, it presents a set of requirements for more generalized trust management, an analysis of why they are needed, and how the state of the art in trust management to date does not meet them. It then presents the design of Hestia, our trust management framework. Hestia supports dynamic trust, which enables the specification and management of trust relationships which can be re-evaluated over the lifetime of a relationship. Hestia also supports the composition of trust relationships, which supports indirect interactions between principals as is the case with publish-subscribe systems. Finally, Hestia handles trust for both access control purposes and for reasoning about the quality of (possibly aggregated) data provided by a set of principals. This dissertation also presents formalisms for dynamic and composable trust.