Abstract:We present SAFE, an integrated system for managing trust using a logic-based declarative language. Logical trust systems authorize each request by constructing a proof from a context---a set of authenticated logic statements representing credentials and policies issued by various principals in a networked system. A key barrier to practical use of logical trust systems is the problem of managing proof contexts: identifying, validating, and assembling the credentials and policies that are relevant to each trust decision. This paper describes a new approach to managing proof contexts using context linking and caching. Credentials and policies are stored as certified logic sets named by secure identifiers in a shared key-value store. SAFE offers language constructs to build and modify logic sets, link sets to form unions, pass them by reference, and add them to proof contexts. SAFE fetches and validates credential sets on demand and caches them in the authorizer. We evaluate and discuss our experience using SAFE to build secure services based on case studies drawn from practice: a secure name service resolver, a secure proxy shim for a key value store, and an authorization module for a networked infrastructure-as-a-service system with a federated trust structure.

Trust Management : Features and Foundations

Privacy Protection in Trust Management

A New Trust Framework for Resource-Sharing in the Grid Environment

Use Trust Management Module to Achieve Effective Security Mechanisms in Cloud Environment

Anonymous authorization in trust management

Toward trust management in autonomic and coordination applications

A Semantic and Trust Based Framework for Rbac User-Role Assignment

PDTM: A Policy-Driven Trust Management Framework in Distributed Systems

A Distributed Trust Management Based on Authorizing Negotiation in Open and Dynamic Environments

Customizable Framework for Managing Trusted Components Deployed on Middleware

Survey of Trust Management in Open Distributed Environments

ATMS:autonomous trust-management system

An Explicit Trust Model Towards Better System Security

A Trust Management System for the IoT domain

The Design and Implementation of a Distributed Access Control System Based on Trust-Management

A Service-Oriented Trust Management Model on Application Server

A Customizable Trust Management Framework Based on Middleware

SAFE: A Declarative Trust Management System with Linked Credentials

Research on Efficient Trust Management in Distributed Environments

Trust Based Access Control in Infrastructure-Centric Environment

Integrity Constraints in Trust Management