Data Mining - Concepts and Techniques.

The objective of this paper is to give a comprehensive introduction to applied cryptography with an engineer or computer scientist in mind. The emphasis is on the knowledge needed to create practical systems which supports integrity, confidentiality, or authenticity. Topics covered includes an introduction to the concepts in cryptography, attacks against cryptographic systems, key use and handling, random bit generation, encryption modes, and message authentication codes. Recommendations on algorithms and further reading is given in the end of the paper. This paper should make the reader able to build, understand and evaluate system descriptions and designs based on the cryptographic components described in the paper.

[서평]「Applied Cryptography」

____ : ..... '"i-t.-

Trust and reputation are central to effective interactions in open multi-agent systems (MAS) in which agents, that are owned by a variety of stakeholders, continuously enter and leave the system. This openness means existing trust and reputation models cannot readily be used since their performance suffers when there are various (unforseen) changes in the environment. To this end, this paper presents FIRE, a trust and reputation model that integrates a number of information sources to produce a comprehensive assessment of an agent's likely performance in open systems. Specifically, FIRE incorporates interaction trust, role-based trust, witness reputation, and certified reputation to provide trust metrics in most circumstances. FIRE is empirically evaluated and is shown to help agents gain better utility (by effectively selecting appropriate interaction partners) than our benchmarks in a variety of agent populations. It is also shown that FIRE is able to effectively respond to changes that occur in an agent's environment.

/pdf/an-integrated-trust-and-reputation-model-for-open-multi-4708vmq0qo.pdf

An integrated trust and reputation model for open multi-agent systems

(1) Whereas the objectives of the Community, as laid down in the Treaty, as amended by the Treaty on European Union, include creating an ever closer union among the peoples of Europe, fostering closer relations between the States belonging to the Community, ensuring economic and social progress by common action to eliminate the barriers which divide Europe, encouraging the constant improvement of the living conditions of its peoples, preserving and strengthening peace and liberty and promoting democracy on the basis of the fundamental rights recognized in the constitution and laws of the Member States and in the European Convention for the Protection of Human Rights and Fundamental Freedoms;

Some Preliminary Comments on the DIRECTIVE 95/46/EC OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data.

A variety of environments currently exist either commercially or in the research community for the development of multi-agent systems for telecommunication applications. Many of them offer the raw tools required for developing agent-based applications. They include provisions for agent mobility, communication, security, and directory facilities among other services. Using a policy-based approach for developing agent systems offers the advantages of systematizing and simplifying development. The approach also offers the potential for dynamic modification of agent system behaviors through changes in policy. This paper briefly reviews some of the previous work in the area of policy management for distributed systems and describes an object-based approach to policy-driven agent development and management.

Towards Policy-Driven Agent System Development and Management

The worldwide growth of e-services has brought to the forefront the importance of private data management for an organization. However, the advancement of computer and networking technologies has made privacy management very challenging. In this paper, we expose the limitations of existing privacy management systems, and present a privacy management system that exploits social network analysis, which can automatically discover the privacy-related workflow models, and support automated privacy management within an organization.

/pdf/privacy-management-system-using-social-networking-1rzfeik122.pdf

Privacy management system using social networking

A number of challenges face the developers of distributed agent-based solutions. This is especially true for those developing agent-based solutions for electronic commerce. Key challenges include secure and efficient software agent deployment, secure communications and the difficulties of developing and monitoring agent systems deployed across a network. This paper reports on the development of a Java-based agent distribution framework which provides the following advantages for developing agent-based electronic commerce applications: (1) a secure agent dispatch mechanism based upon agent authentication and role-based security levels, (2) inter-agent communication means that include peer-to-peer communication via its own published objects as well as a multicast event service, (3) encrypted object streams for unicast and multicast communications, (4) reflective communication monitoring for agent system development and visualization, (5) mechanisms for efficient agent distribution, and (6) an easy-to-use environment for making small footprint agents.

Towards an agent middleware framework for e-commerce

The growth of the Internet has been accompanied by the growth of e-services (eg e-commerce, e-health) This proliferation of e-services has put large quantities of customer private information in the hands of service providers, who in many cases have mishandled the information to the detriment of customer privacy As a result, government bodies have put in place privacy legislation that spells out the privacy rights of customers and how their private information is to be handled Service providers are required to comply with this privacy legislation This paper proposes a cooperative visualization technique that can be employed by service providers to understand how private information flows within their organizations, as a way of identifying privacy risks or vulnerabilities that can lead to violations of privacy legislation The description of the technique includes a model of how an e-service uses private information, a graphical notation for the visualization, and an application example

Cooperative Visualization of Privacy Risks

We show that the scalable multicast security protocol based on RSA, proposed by R. Molva and A. Pannetrat (see ACM Trans. Inform. Syst. Security, vol.3, no.3, p.136-60, 2000), is insecure against collusion attacks.

Larry Korba

Papers

Towards Policy-Driven Agent System Development and Management

Privacy management system using social networking

Towards an agent middleware framework for e-commerce

Cooperative Visualization of Privacy Risks

Cryptanalysis of scalable multicast security protocol