Abstract:In this article, we explore current approaches used to evaluate trust in software ecosystems, focusing on analyzing the specific techniques utilized, the primary factors in trust evaluation, the diverse formats for result presentation, as well as the software ecosystem entities considered in the approaches. Third‐party software has streamlined the software engineering process, allowed software engineers to focus on developing more advanced components, and reduced time and cost. This shift has led to software development strategies moving from competition to collaboration, resulting in the concept of software ecosystems, in which internal and external actors work together on shared platforms and place their trust in the ecosystem. However, the increase in shared components has also created challenges, especially in security, as the large dependency trees significantly enlarge a system's attack surface. The situation is made worse by the lack of effective ways to measure and ensure the trustworthiness of these components. In this article, we explore current approaches used to evaluate trust in software ecosystems, focusing on analyzing the specific techniques utilized, the primary factors in trust evaluation, the diverse formats for result presentation, as well as the software ecosystem entities considered in the approaches. Our goal is to provide the status of current trust evaluation approaches, including their limitations. We identify key challenges, including the limited coverage of software ecosystem entities; the objectivity, universality, and environmental impacts of the evaluation approaches; the risk assessment for the evaluation approaches; and the security attacks posed by trust evaluation in these approaches.

Distributed Trust Through the Lens of Software Architecture

Trustworthy Distributed AI Systems: Robustness, Privacy, and Governance

A Distributed Trust Framework for Privacy-Preserving Machine Learning

A blockchain-based trust system for decentralised applications: When trustless needs trust

TrustVis: Visualizing Trust Toward Attack Identification in Distributed Computing Environments

The Design and Implementation of a Distributed Access Control System Based on Trust-Management

Blockchain-based Trustworthy Federated Learning Architecture

Trust Dynamics and Market Behavior in Cryptocurrency: A Comparative Study of Centralized and Decentralized Exchanges

Distributed Trust Model Based on D-S Theory

A Perspective of Software Trustworthiness Based on Distrustable Factors

An Overview of Trust Standards for Communication Networks and Future Digital World

TDML -- A Trustworthy Distributed Machine Learning Framework

Enhancing Trust and Privacy in Distributed Networks: A Comprehensive Survey on Blockchain-based Federated Learning

A systematic literature review on trust in the software ecosystem

Original cause of software untrustworthiness: Distrustable factor

A survey of the state‐of‐the‐art approaches for evaluating trust in software ecosystems

Towards creation of a reference architecture for trust-based digital ecosystems

Survey of Trust Management in Open Distributed Environments

Decentralized Trust Management: Risk Analysis and Trust Aggregation

A Survey of Trustworthy Federated Learning: Issues, Solutions, and Challenges