2009 · 24 citations · 17 references
ComputingCybersecurityAccess ManagementDelegationInformation Security ManagementAccess ControlCredential ManagementPolicy ManagementReputationReputation ManagementSecurity Information ManagementAuthorization PoliciesFlexibilityPolicy EnforcementReputation MechanismsReputation SystemsTrust ManagementTrust Models
Quantitative Trust Management (QTM) provides a dynamic interpretation of authorization policies for access control decisions based on upon evolving reputations of the entities involved. QuanTM, a QTM system, selectively combines elements from trust management and reputation management to create a novel method for policy evaluation. Trust management, while effective in managing access with delegated credentials (as in PolicyMaker and KeyNote), needs greater flexibility in handling situations of partial trust. Reputation management provides a means to quantify trust, but lacks delegation and policy enforcement.
17
Design of a role-based trust-management framework
Ninghui Li, John C. Mitchell, William H. Winsborough · 2005 · 753 citations
Ninghui Li, Benjamin N. Grosof, Joan Feigenbaum · ACM Transactions on Information and System Security · 2003 · 427 citations