Evolution and challenges in trust and security in information system infrastructures

ABSTRACT

In these uncertain economic times, two key ingredients which are in short supply are trust and confidence. The concept of trust has been around for many decades (if not for centuries) in different disciplines such as business, psychology, philosophy as well as in security technology. The current financial climate gives a particularly prescient example. As financial journalist Walter Bagehot wrote some 135 years ago, "after a great calamity, everybody is suspicious of everybody" and "credit, the disposition of one man to trust another, is singularly varying." The problem, as Bagehot observed it, was trust, or rather the lack of it, and it's as true today as it was in his time. Financial mechanisms aren't the only entities that must deal with trust--today's social networking communities such as Facebook, Wikipedia, and other online communities have to constantly reconcile trust issues, from searching and locating credible information, to conveying and protecting personal information. Furthermore with ever increasing reliance on digital economy, most business and government activities today depend on networked information systems for their operations. In this talk, we'll take a short journey through the concept and evolution of trust in the secure computing technology world, and examine some of the challenges involved in trusted computing today.

REFERENCES

• 1: N. Luhmann, Trust and Power, Wiley & Sons, 1979.
• 2: M. Deutsch, Cooperation and Trust: Some Theoretical Notes, Nebraska Univ. Press, 1962.
• 3: D. Gambetta, Trust, Basil Blackwell, 1990.
• 4: Trusted Computer System Evaluation Criteria (TCSEC), DoD5200.28-STD, US Dept. of Defense, Dec. 1985.
• 5: M. Blaze, J. Feigenbaum, and J. Lacy, "Decentralized Trust Management," Proc IEEE Conf. Security and Privacy, IEEE Press, pp 164--173, 1996
• 6: Siani Pearson, Boris Balacheff, Liqun Chen, David Palquin and Graeme Proudler, Trusted Computing Platforms, TCPA Technology in Context, Prentice Hall, 2002
• 7: C. Lin and V. Varadharajan, "A Hybrid Trust Model for Enhancing Security in Distributed Systems," Proceedings of the International Conference on Availability, Reliability and Security (ARES 07), IEEE CS Press, 2007, pp. 35--42.
• 8: A. Nagarajan, V.Varadharajan, M.Hitchens and S. Arora, "On the Applicability of Trusted Computing in Distributed Authorization Using Web Services", Proceedings of the 22nd annual IFIP WG 11.3 working conference on Data and Applications Security, Lecture Notes in Computer Science; Vol. 5094, 2008, pp. 222--237.
• 9: V. Balakrishnan, V. Varadharajan, U.K. Tupakula, and P. Lucs "TEAM: Trust Enhanced Security Architecture for Mobile Ad-hoc Networks". Proceedings of the 15th IEEE International Conference on Networks (ICON 2007), 2007, pp. 182--187.

INDEX TERMS

Primary Classification:
  H. Information Systems
  H.1 MODELS AND PRINCIPLES
      H.1.m Miscellaneous

General Terms:
Security

Keywords:
trust enhanced security, trust management, trust models