an intergration of reputation-based and policy-based trust推荐.pdfVIP

An Integration of Reputation-based and Policy-based Trust Management Piero Bonatti , Claudiu Duma , Daniel Olmedilla , and Nahid Shahmehri ` Universita di Napoli Federico II, Napoli, Italy bonatti@na.infn.it ¨ Department of Computer and Information Science, Linkopings universitet cladu,nahsh@ida.liu.se L3S Research Center and University of Hannover, Hanover, Germany olmedilla@l3s.de Abstract. Trust management is currently being tackled from two different perspec- tives: a “strong and crisp” approach, where decisions are founded on logical rules and verifiable properties encoded in digital credentials, and a “soft and social” approach, based on reputation measures gathered and shared by a distributed community. We analyze the differences between the two models of trust and argue that an integrated approach would improve significantly trust management systems. We support our claim with real world scenarios and illustrate how the two models are integrated in PROTUNE, the core policy specification language of the network of excellence REWERSE. 1 Introduction Trust management has been an important research line in the development of modern open distributed and decentralized systems. Trust has been studied in the context of decentral- ized access control [5, 16], public key certification [4, 9], and reputation systems for P2P networks [2, 14, 10]. There exist currently two different major approaches for managing trust: policy-based and reputation-bas