Trust MetaPolicies for Flexible and Dynamic Policy Based Trust Management

1
Trust Meta-Policies for Flexible and Dynamic
Policy Based Trust Management
Karl Quinn, Dave Lewis, Declan OSullivan, and
Vincent P. Wade.

• Knowledge Data Engineering Group,
• School of Computer Science Statistics,
• Trinity College Dublin,
• Ireland.
• Email Firstname.Lastname_at_cs.tcd.ie

2
Trust

• Trust is a fashionable but overloaded term with
  lots of intertwined meanings 1
• - Why is Trust Bad for Security, Dieter
  Gollmann, Keynote, Policy 2005.
• Editor in chief International Journal of
  Information Security

3
Trust

• Many definitions use synonyms or trust inspiring
  terms...
• Credibility or Reliability - Golbeck 2
• Confidence or Faith - Shadbolt 3
• Reputation - Golbeck 4
• Competence and Honesty - Grandison 5
• Competence and Reliability - McAllister 6
• Belief - McKnight 7

4
Trust iTrust 06
5
Multi-faceted Model of Trust
Upper Ontology
OWL
Meta-Model
6
Upper Model
Personalised Model
Jena
OWL
OWL
Meta Model
Protégé
Domain Specific Model
OWL
7
Trust Meta-Policies

• Trust Meta-Policy
• A trust policy about a standard policy.
• Arose from integration of trust research with
• Community Based Policy Management (CBPM)
• Self-model sub-communities.
• Delegate Resource and Authority sets.
• Allow membership of community based on an
  arbitrary qualification or criteria.
• CBPM See Policy 2004
• CBPM Trust See Policy 2005

8
Half Life 2 Simulator Movie
9
Trust Meta-Policies
Current CBPM Trust integration.
10
Trust Meta-Policies
Policy with Trust Meta-Policy Step One
11
Trust Meta-Policies
Policy with Trust Meta-Policy Step Two
association
12
Trust Meta-Policies

• Advantages
• Independent management and usage of trust
  policies and standard policies.
• Trust Meta-Policy naturally associates events
  with risk levels.
• Combining standard policies and trust
  meta-policies provides flexible and dynamic
  management.
• Disadvantages
• How, in implementation terms, are Trust
  Meta-Policies associated and evaluated with
  standard policies?

13
Evaluation Experiment

• Subject created
• Personalised Model of Trust,
• Annotated various people with trust data,
• Created Trust Meta-Policies for various objects,
• Asked whether they would grant a request for an
  object.
• Evaluation
• Calculated personalised trust value,
• Recommended based on trust value and trust
  meta-policy.
• Accuracy evaluated by answer recommendation
  comparison.

14
Evaluation Experiment 9
15
Evaluation Experiment 280

• Accuracy

Accuracy Matrix Evaluation Experiment One (of
three)
16
Summary

• Multi-faceted, personalised, and specialised
  model of trust.
• CBPM, and HL2 Integration.
• Trust Meta-Policies.
• Evaluation Experiment
• Thank You

17
Publications - www.karlquinn.com

• PUBLICATIONS 2004
• Quinn, K., O'Sullivan, D., Lewis, D., Wade,
  V.P., 'Composition of Trustworthy Web Services',
  Information Technology and Telecommunications
  Annual Conference, Limerick, Ireland, October
  20-21, 2004.
• Brennan, R., Quinn, K., O'Sullivan, D., Lewis,
  D., Wade V.P., 'On the Application of Paired
  Comparison to Trust', 2nd International Workshop
  on Managing Ubiquitous Communications and
  Services (MUCS), Dublin, Ireland, December 13-14,
  2004.
• PUBLICATIONS 2005
• Quinn, K., O'Sullivan, D., Lewis, D., Wade,
  V.P., 'deepTrust Management Application for
  Discovery, Selection, and Composition of
  Trustworthy Services', 9th IFIP/IEEE
  International Symposium on Integrated Network
  Management (IM 2005), Nice, France, 15-19 May,
  2005 . Feeney, K., Quinn, K., O'Sullivan, D.,
  Lewis, D., Wade, V.P., 'Relationship-Driven
  Policy Engineering for Autonomic Organisations',
  IEEE 6th International Workshop on Policies for
  Distributed Systems and Networks (POLICY 2005),
  Stockholm, Sweden, 6-8 June, 2005 .
• Quinn, K., O'Sullivan, D., Lewis, D., Wade,
  V.P., 'Policy Ontologies Panellist', 4th
  International Semantic Web Conference, Semantic
  Web Policy Workshop (SWPW 2005), Galway, Ireland,
  7th November, 2005.
• PUBLICATIONS 2006Quinn, K., Kenny, A., Feeney,
  K., O'Sullivan, D., Lewis, D., Wade, V.P., 'A
  Framework for the Decentralisation and Management
  of Collaborative Applications in Ubiquitous
  Computing Environments ', 10th IEEE/IFIP Network
  Operations and Management Symposium (NOMS 2006),
  Vancouver, Canada, 3-7 April, 2006. Quinn, K.,
  O'Sullivan, D., Lewis, D., Wade, V.P., 'The
  Design, Generation, and Utilisation of a
  Semantically Rich Personalised Model of Trust',
  4th International Conference on Trust Management
  (iTrust 2006), Pisa, Italy, 15-19 May, 2006.
  Quinn, K., O'Sullivan, D., Lewis, D., Wade,
  V.P., 'Trust Meta-Policies for Flexible and
  Dynamic Policy Based Trust Management', 7th
  International Workshop on Policy (POLICY 2006),
  London, Ontario, Canada, 5-7 June, 2006.

18
References

• 1 Gollmann, D., Why Trust is Bad for
  Security, Keynote Speech, IEEE 6th International
  Workshop on Policies for Distributed Systems and
  Networks (POLICY 2005), Stockholm, Sweden, 6-8
  June, 2005.
• 2 Golbeck, J., Hendler, J., Parsia, B. Trust
  Networks on the Semantic Web, 12th International
  Web Conference (WWW03), Budapest, Hungary, May
  2003.
• 3 Shadbolt, N., A Matter of Trust, IEEE
  Intelligent Systems, pp. 2-3 January/February
  2002.
• 4 Golbeck, J., Hendler, J., Inferring
  Reputation on the Semantic Web, 13th
  International Web Conference (WWW2004), New York,
  NY, USA, May 2004.
• 5 Grandison, T., Sloman, M., A Survey of Trust
  in Internet Applications, IEEE Communications
  Surveys, 3, pp. 2-16, Fourth Quarter 2000.
• 6 D. McAllister, "Affect- and cognition-based
  trust as foundations for interpersonal
  cooperation in organizations," Academy of
  Management Journal, vol. 381, pp. 24-59, 1995.
• 7 McKnight, H.D., Chervany, N.L., The Meanings
  of Trust Technical Report 94-04, Carlson School
  of Management, University of Minnesota, 1996.