Automated trust negotiation based on security level

Wei-jun SHAO,Jun-yuan XIE,Lun JIN

DOI: https://doi.org/10.3969/j.issn.1001-3695.2007.12.063

2007-01-01

Abstract:This paper introduced the notion of automated trust negotiation based on security level and how to use it to protect the system from the attacks leading to denial of service or leakage of sensitive information.

What problem does this paper attempt to address?

A Complete and Efficient Strategy Based on Petri Net in Automated Trust Negotiation

Yan He,Miaoliang Zhu

DOI: https://doi.org/10.4108/infoscale.2007.888

2007-01-01

Abstract:Traditional security model, where the identity of all possible requesting subjects must be pre-registered in advance, is not suitable for the distributed applications with strong real-time requirements, especially recently popular P2P networks and Grid computing. A promising approach is represented by automated trust negotiation, which establishes trust between strangers through the exchange of digital credentials and the use of access control policies. An automated trust negotiation strategy needs to be adopted to establish trust between two parties based on their disclosure policies. Previously proposed negotiation strategies may fail when in fact success is possible, disclose irrelevant credentials, or have high communication or computational complexity. In this paper, we model the policies participating trust negotiation as Negotiation Petri Net and propose a trust negotiation Strategy based on Negotiation Petri Net (SNPN) by combining the characteristics of Negotiation Petri Net architecture with the behaviors of auto trust negotiation. We prove that SNPN is efficient with O(n) communication complexity and O(nm) computational complexity including Negotiation Petri Net building process and the negotiation process in the worst case, where n is the number of credentials and m is the size of the credential disclosure policies. Meanwhile SNPN is complete and makes sure that no irrelevant credentials will be disclosed during negotiations.
An Efficient and Minimum Sensitivity Cost Negotiation Strategy in Automated Trust Negotiation

Yan He,Miaoliang Zhu,Chunying Zheng

DOI: https://doi.org/10.1109/CSSE.2008.867

2008-01-01

Abstract:Traditional security model, where the identity of all possible requesting subjects must be pre-registered in advance, is not suitable for the distributed applications with strong real-time requirements. A promising approach is represented by automated trust negotiation, which establishes trust between strangers through the exchange of digital credentials and the use of access control policies. As the credentials contain sensitive information, entities disclose credentials circumspectly. Given multiple credential exchange sequences achieving the same result, it is desirable to pick the sequence that discloses a set of minimum sensitive credentials. In this paper, we model the policies participating trust negotiation as a Negotiation Petri Net and propose a trust negotiation MSC strategy, which works by the characteristics of Negotiation Petri Net architecture, the behaviors of auto trust negotiation and the greedy algorithm. We prove that the MSC strategy is complete, efficient and mini-sensitivity cost. It also makes sure that no irrelevant credentials will be disclosed during negotiations.
Formal security analysis of automated trust negotiation

Xinxin Liu,Shaohua Tang,Kai Wei

DOI: https://doi.org/10.1109/ICMLC.2010.5580592

2010-01-01

Abstract:Automated trust negotiation (ATN) is an approach to establishing mutual trust between strangers wishing to share resources or conduct business by gradually requesting and disclosing digitally signed credentials. We present the formalization of automated trust negotiation system in the applied pi calculus and analyze its security property automatically with the assistant of an automatic protocol analyzer, ProVerif.
Use Trust Management Module to Achieve Effective Security Mechanisms in Cloud Environment

Wenjuan Li,Lingdi Ping,Xuezeng Pan

DOI: https://doi.org/10.1109/iceie.2010.5559829

2010-01-01

Abstract:Security and interoperability is the biggest challenge to promote cloud computing currently. Trust has proved to be one of the most important and effective alternative means to construct security in distributed systems. In order to efficiently and safely construct entities' trust relationship in cloud and cross-clouds environment, this paper proposed a novel cloud trust model and a new cloud security framework. The propose trust model is domain-based. It divides one cloud provider's resource nodes into the same trust domain. It designs different trust strategies for different roles. Trust recommendation is treated as one type of cloud services just like computation or storage. Based on the proposed trust model, it introduced a novel cloud security framework with an independent trust management module. Using the proposed security model, it introduced some trust-based security mechanisms. Results of simulation experiments show that the proposed security model can achieve high transaction success rate with high trust accuracy.
New Secure Trust Negotiation Strategy Algorithm

JIN Lun,PENG Zhao-yang,XIE Jun-yuan

DOI: https://doi.org/10.3969/j.issn.1001-3695.2007.06.044

2007-01-01

Abstract:The general flow of trust negotiation was introduced,the concept of gradual trust negotiation and policy graph was given,a new secure trust negotiation strategy algorithm was put and the security of it was analyzed.
Automated Trust Negotiation Based on Concurrent Zero-Knowledge for e-Business Applications

Shangyuan Guan,Xiaoshe Dong,Yiduo Mei,Weiguo Wu,Zhengdong Zhu

DOI: https://doi.org/10.1109/ICEBE.2008.50

2008-01-01

Abstract:Exchange of attribute certificates is a means to establish mutual trust between strangers wishing to share resources or conduct business transactions. Automated trust negotiation (ATN) is a promising approach to regulating the exchange of sensitive information during this process. It has been a fundamental but challenging problem to preserve the privacy of the two negotiation parties during the period of ATN. We present the enhanced hidden credentials and improved concurrent zero-knowledge proof protocol. Based on the above technologies, we propose an ATN for e-business applications, named CASTLE. CASTLE can not only enable the oblivious and selective usage of an attribute or a certificate, but also be resistible for many attacks, especially conspiracy attack. We illustrate the usage of CASTLE through a typical example.
An Attribute-Constraints-Oriented Automated Trust Negotiation Model

GUAN Shangyuan,WU Weiguo,DONG Xiaoshe,MEI Yiduo

DOI: https://doi.org/10.3321/j.issn:0253-987X.2009.08.001

2009-01-01

Abstract:The existing automated trust negotiation systems suffer from the following drawbacks: the policy languages are coarse-grained,the negotiation strategy cannot generate all trust sequences,and the mechanism to evaluate and select trust sequences is absent.To address the above problems,an attribute-constraint-oriented automated trust negotiation(ACATN) model is proposed.The policy language is refined by using attribute constraint,which can not only effectively protect sensitive services and certificates,but also enhance its flexibility.The global access control policy is used to terminate impossible negotiation in advance so that the negotiation efficiency can be improved.The process of generating trust sequence is described by trust sequence searches tree.Based on the tree,the breadth-first and depth-first searches generate not only a trust sequence quickly,but also all trust sequences.Trust sequences are evaluated via disclosure cost and communication overhead so that the optimal one can be selected.ACATN is illustrated using a typical example.
Towards Automated Trust Negotiation for Grids

Shangyuan Guan,Xiaoshe Dong,Yiduo Mei,Weiguo Wu,Zhenghua Xue

DOI: https://doi.org/10.1109/ICNSC.2008.4525201

2008-01-01

Abstract:Trust is an important aspect of decision making for grid applications. It has been a fundamental but challenging problem to gain assurance of the trustworthiness of service providers or requesters. This paper proposes a novel trust negotiation framework, ENVOY, to establish trust relationship between service providers and requesters in grids. ENVOY supports various kinds of delegation by leveraging attribute-based credentials and defines delegation range expediently by using attribute constraint, and we develop a negotiation strategy based on protection tree to support ENVOY, which provides the support for protection of sensitive information of the two negotiation parties. Moreover, ENVOY employs multithreaded technology and trust ticket to speed up negotiation. This paper describes the implementation of ENVOY and designs experiments to evaluate its performance, and the experimental results show that it is applicable.
A Distributed Trust Management Based on Authorizing Negotiation in Open and Dynamic Environments

Shangyuan Guan,Xiaoshe Dong,Weiguo Wu,Yiduo Mei,Guofu Feng

DOI: https://doi.org/10.1109/aina.2008.25

2008-01-01

Abstract:Trust has been recognized as an important factor for information security in open and dynamic environments, such as Internet applications, p2p systems etc. On the basis of analyzing existing trust management systems, this paper proposes a Distributed Trust Management based on Authorizing Negotiation (DTMAN). DTMAN presents a number of innovative features. First, it can authorize strangers by using authorizing negotiation, so it is very suitable for open and dynamic environments. Second, a high efficient algorithm for compliance checking is developed to support DTMAN, whose time complexity and space complexity are both O(n) (where n is the cardinality of the set of authorization credentials). The experimental result shows that the algorithm of DTMAN is more efficient than others.
An Explicit Trust Model Towards Better System Security

Orhio Mark Creado,Bala Srinivasan,Phu Dung Le,Jefferson Tan

DOI: https://doi.org/10.5121/csit.2014.4212

2014-03-03

Abstract:Trust is an absolute necessity for digital communications; but is often viewed as an implicit singular entity. The use of the internet as the primary vehicle for information exchange has made accountability and verifiability of system code almost obsolete. This paper proposes a novel approach towards enforcing system security by requiring the explicit definition of trust for all operating code. By identifying the various classes and levels of trust required within a computing system; trust is defined as a combination of individual characteristics. Trust is then represented as a calculable metric obtained through the collective enforcement of each of these characteristics to varying degrees. System Security is achieved by facilitating trust to be a constantly evolving aspect for each operating code segment capable of getting stronger or weaker over time.

Cryptography and Security
Towards Automated TrustNegotiation Forgrids

Shangyuan Guan,Xiaoshe Dong

2007-01-01

Abstract:Trust isanimportant aspect ofdecision makingfor gridapplications. Ithasbeenafundamental butchallenging problemtogainassurance ofthetrustworthiness ofservice providers orrequesters. Thispaperproposes a noveltrust negotiation framework, ENVOY,toestablish trust relationship betweenservice providers andrequesters ingrids. ENVOY supportsvariouskindsof delegation by leveraging attribute-based credentials and defines delegation range expediently byusingattribute constraint, andwe develop a negotiation strategy basedon protection treetosupport ENVOY,whichprovides thesupport forprotection ofsensitive information ofthetwonegotiation parties. Moreover, ENVOY employs multithreaded technology andtrust ticket tospeedup negotiation. Thispaperdescribes theimplementation of ENVOY anddesigns experiments toevaluate itsperformance, andtheexperimental results showthatitisapplicable. I.INTRODUCTION GRIDemphasizes large scale resource sharing across Jadministrative domains orsecurity domains inaflexible, secure, andcoordinated fashion (1). Asgrid transfers froma purely scientific community toaheterogeneous, commercial, opencommunity, itenters an environment ofmutual suspicion (2). Malicious users maydamage grids bystealing sensitive information. Therefore, themostsignificant challenge forgrid computing istodevelop acomprehensive setofmechanisms andpolicies forsecuring grids, oneof whichistheenforcement ofaccess control. Accesscontrol ingrids istypically provided by a combination ofidentity certificates andlocal accounts (3). Unfortunately, traditional access control methods based on theidentity ofusersisineffective andcannot scale well because thenumberofusers andservices islarge andtheir population isdynamic. Furthermore, service provider and usermaybefromdifferent security domains whichmight maintain different security policies, possibly without prior knowledge ofeachother. Therefore, ithasbeena fundamental butchallenging problem togain assurance ofthe trustworthiness oftheservice provider orusers. A promising approach toaccess control, Automated Trust Negotiation (ATN)(4), iswell-suited forgrids because it allows thetwonegotiation parties establish trust bygradually andinteractively disclosing credentials andaccess control policies while preserving their privacy. However, there are somelimitations ondelegation andnegotiation strategy in
A Novel Automated Trust Negotiation Framework for Securing Grids

Shangyuan Guan,Yiduo Mei,Xiaoshe Dong,Zhao Wang,Zhengdong Zhu

DOI: https://doi.org/10.1007/978-3-540-92719-8_42

2007-01-01

Abstract:Automated Trust Negotiation (ATN) is a promising approach to allowing strangers to access sensitive services in open environments. Although many ATN systems are proposed, some issues still remain to be addressed: 1) they are centralized and cannot scale well; and 2) their policy languages are coarse-grained. To address the above problems and secure grids, we present a novel automated trust negotiation framework, FORT, to establish trust relationship between service providers and service requesters. FORT is decentralized, so it scales well. Furthermore, we utilize attribute constraints to refine its language. This paper implements FORT and designs experiments to evaluate its performance. Experimental results show that FORT can effectively protect sensitive services at the cost of little performance of systems and scale well.
A Role-Based Automated Trust Negotiation and Authentication Design in Mobile Ad Hoc Networks

Qiang Zhang,Xiaowei Wang,Zhenghu Gong

DOI: https://doi.org/10.1109/CSSE.2008.1363

2008-01-01

Abstract:We find that traditional authentication ways donpsilat act well in MANETs for the features of dynamic topology and non-existence of central facilities in mobile ad hoc networks. This paper presents a distributed trust proving language, which is based on role trust. The solution of constructing credential authentication infrastructure and the problem how to perform automated trust negotiation are also discussed. Our design defines roles and policies to make distributed trust negotiation and it can avoid unrelated credential fetching. Simulations show that Our design outperforms traditional trust negotiation ways and is more efficient as a security authentication mechanism in the MANET environments.
Mobile security service system based on security level negotiation

QIAN Wei-zhong,QIN Zhi-guang,GUO Chen-xuan,CHEN Jian-yong

2007-01-01

Journal of Computer Applications

Abstract:The different security requirements of applications on mobile communication environment were introduced,and the security policy and its structure were designed.On the basis of the policy,a model of mobile security service system was proposed,and the security level negotiation between network elements in different security levels was presented.The research production can provide a solution for allocating security services based on user requirements and be a technology guarantee for mobile communication operator to implement value-added security service.
Research on a New Infrastructure of Trustworthy Networks

ZHANG Min,LUO Guang-chun

DOI: https://doi.org/10.3969/j.issn.1001-0548.2007.06.012

2007-01-01

Abstract:The application security problem of Internet is far from being completely solved. In this paper, some basic concepts and critical issues in trustworthy computer network are first introduced. Then an architecture of trustworthy network, and host Identity Protocol as end system identity, is proposed to make sure communicate trustworthy.
Managing Trust for Secure Active Networks

Jian-Jun Qi,Zeng-Zhi Li

DOI: https://doi.org/10.1007/11559221_77

2005-01-01

Abstract:This paper proposes a security architecture that employs trust notion to address security issues in active networks. The subjectivity of trust is discussed, and the innovative idea is that how to compute trust should be decided subjectively by an entity. Then, a general framework for a trust system is described. Finally, a flexible trust management model, which employs the features of active networks, is presented. In this model, different entities can use different methods to compute trust, and an entity can change its computing method of trust over time.
An ontology-based approach to automated trust negotiation

Xinxin Liu,Shaohua Tang,Qiong Huang,Zhiwen Yu

DOI: https://doi.org/10.1016/j.csi.2013.03.003

IF: 3.721

2013-01-01

Computer Standards & Interfaces

Abstract:We propose an ontology-based approach to automated trust negotiation (ATN) to establish a common vocabulary for ATN across heterogeneous domains and show how ontologies can be used to specify and implement ATN systems. The components of the ATN framework are expressed in terms of a shared ontology and ontology inference techniques are used to perform ATN policy compliance checking. On this basis, a semantically relevant negotiation strategy (SRNS) is proposed that ensures the success of a negotiation whenever it is semantically possible. We analyze the properties of SRNS and evaluate the performance of the ontology-based ATN.
CASTTE: A Trust Management for Securing the Grid

Shangyuan Guan,Xiaoshe Dong,Yiduo Mei,Zhao Wang,Zhengdong Zhu

DOI: https://doi.org/10.1109/HPCC.2008.117

2008-01-01

Abstract:It has been a fundamental but challenging problem to gain assurance of the trustworthiness of service providers or requesters and ensure their interests. We present the formal definition of trust management, and then propose a trust management, CASTTE, to secure sensitive services and requesters in grids. CASTTE verifies access trust by using trust negotiation so as to protect sensitive services, and protects sensitive information of the two negotiators effectively by using a negotiation strategy based on protection tree. Furthermore, we utilize trust force to specify provision trust and apply trust force to service selection. This paper implements CASTTE and designs experiments to evaluate its performance. The experimental results show that it can not only protect sensitive services at the cost of little performance of systems, but also identify good services from bad ones effectively.
Study on trust based P2P network security management

Wu Liu,HaiXin Duan,Hong Zhang,Jianping Wu

2008-01-01

Abstract:The trust mechanism was introduced to dynamically evaluate user's behavior in P2P network, and bind user's reputation with its access control privilege in the network. In addition, the trust based dynamic access control mechanism and key algorithm was proposed and implemented. With the trust based network security management system implemented based on the trust mechanism, a malicious user will be kicked out from the network system and refused from accessing resources of the network automatically when the user's reputation is lower than some threshold.
Trust Based User Behavior Analysis and Security Management Mechanism in P2P Network

LIU Wu,DUAN Hai-Xin,ZHANG Hong,WU Jian-Ping

2008-01-01

Periodical of Ocean University of China

Abstract:In traditional network security management systems,system administrators could not prevent malicious users from illegal actions in time.This paper introduces the trust mechanism to dynamically evaluate user's reputation which is correlated with the user's privilege in the network and based on which we proposed and implemented the key algorithm of trust based access control in P2P Network.

Automated trust negotiation based on security level

A Complete and Efficient Strategy Based on Petri Net in Automated Trust Negotiation

An Efficient and Minimum Sensitivity Cost Negotiation Strategy in Automated Trust Negotiation

Formal security analysis of automated trust negotiation

Use Trust Management Module to Achieve Effective Security Mechanisms in Cloud Environment

New Secure Trust Negotiation Strategy Algorithm

Automated Trust Negotiation Based on Concurrent Zero-Knowledge for e-Business Applications

An Attribute-Constraints-Oriented Automated Trust Negotiation Model

Towards Automated Trust Negotiation for Grids

A Distributed Trust Management Based on Authorizing Negotiation in Open and Dynamic Environments

An Explicit Trust Model Towards Better System Security

Towards Automated TrustNegotiation Forgrids

A Novel Automated Trust Negotiation Framework for Securing Grids

A Role-Based Automated Trust Negotiation and Authentication Design in Mobile Ad Hoc Networks

Mobile security service system based on security level negotiation

Research on a New Infrastructure of Trustworthy Networks

Managing Trust for Secure Active Networks

An ontology-based approach to automated trust negotiation

CASTTE: A Trust Management for Securing the Grid

Study on trust based P2P network security management

Trust Based User Behavior Analysis and Security Management Mechanism in P2P Network