Data Mining - Concepts and Techniques.

The objective of this paper is to give a comprehensive introduction to applied cryptography with an engineer or computer scientist in mind. The emphasis is on the knowledge needed to create practical systems which supports integrity, confidentiality, or authenticity. Topics covered includes an introduction to the concepts in cryptography, attacks against cryptographic systems, key use and handling, random bit generation, encryption modes, and message authentication codes. Recommendations on algorithms and further reading is given in the end of the paper. This paper should make the reader able to build, understand and evaluate system descriptions and designs based on the cryptographic components described in the paper.

[서평]「Applied Cryptography」

____ : ..... '"i-t.-

Trust and reputation are central to effective interactions in open multi-agent systems (MAS) in which agents, that are owned by a variety of stakeholders, continuously enter and leave the system. This openness means existing trust and reputation models cannot readily be used since their performance suffers when there are various (unforseen) changes in the environment. To this end, this paper presents FIRE, a trust and reputation model that integrates a number of information sources to produce a comprehensive assessment of an agent's likely performance in open systems. Specifically, FIRE incorporates interaction trust, role-based trust, witness reputation, and certified reputation to provide trust metrics in most circumstances. FIRE is empirically evaluated and is shown to help agents gain better utility (by effectively selecting appropriate interaction partners) than our benchmarks in a variety of agent populations. It is also shown that FIRE is able to effectively respond to changes that occur in an agent's environment.

/pdf/an-integrated-trust-and-reputation-model-for-open-multi-4708vmq0qo.pdf

An integrated trust and reputation model for open multi-agent systems

(1) Whereas the objectives of the Community, as laid down in the Treaty, as amended by the Treaty on European Union, include creating an ever closer union among the peoples of Europe, fostering closer relations between the States belonging to the Community, ensuring economic and social progress by common action to eliminate the barriers which divide Europe, encouraging the constant improvement of the living conditions of its peoples, preserving and strengthening peace and liberty and promoting democracy on the basis of the fundamental rights recognized in the constitution and laws of the Member States and in the European Convention for the Protection of Human Rights and Fundamental Freedoms;

Some Preliminary Comments on the DIRECTIVE 95/46/EC OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data.

The growth of the Internet has been accompanied by the growth of Internet e-business services (e.g., electronic bookseller services, electronic stock-transaction services). This proliferation of e-business services has in turn fueled the need to protect the personal privacy of e-business users or consumers. We advocate a privacy policy approach to protecting personal privacy. However, it is evident that the specification of a personal privacy policy must be as easy as possible for the consumer. In this paper, we define the content of personal privacy policies using privacy principles that have been enacted into legislation. We then present two semiautomated approaches for the derivation of personal privacy policies. The first approach makes use of common privacy rules obtained through community consensus. This consensus can be obtained from research and/or surveys. The second approach makes use of existing privacy policies in a peer-to-peer community. We conclude the paper by explaining how personal privacy policies can be applied in e-business to protect consumer privacy.

Semiautomatic Derivation and Use of Personal Privacy Policies in E-Business

Development of acceptable agent-based distributed systems requires secure techniques for agent migration and agent communication. Several Java-based agent frameworks provide these functions to greater or lesser extents. This paper describes an agent distribution framework for intercommunicating agents using Java which targets several key goals: 1) provide an agent dispatch mechanism to selected nodes from secured agent repositories by one or more authenticated agent deployment applets or agents. 2) Adjust the operating environment for each agent depending upon its role-based authenticated security level. 3) Provide inter-agent communication by way of its own published objects as well as a multicast event service. 4) Provide encryption for communications depending on the security requirements. 5) Provide a distributed naming directory of agents populating the network. 6) Monitor agents proactively for appropriate activity. 7) Keep the environment lightweight, making agents small in size, and the package easy to use.

/pdf/towards-secure-agent-distribution-and-communication-4yropl89nl.pdf

Towards secure agent distribution and communication

Anonymous communication techniques are vital for some types of e-commerce applications. There have been several different approaches developed for providing anonymous communication over the Internet. In this paper, we review key techniques for anonymous communication and describe an alternate anonymous networking approach based on agile agents intended to provide anonymous communication protection for mobile agent systems.

Anonymous Communications for Mobile Agents

In recent years there has been a movement toward deployment of distributed approaches for electronic commerce. Intelligent software agents, for instance, may be instructed to act oh behalf of human users in electronic transactions. A challenge with this approach is that the agents would be entrusted with access to sensitive personal or business information. How can this sensitive information be protected from unauthorized access? How can agents negotiate across jurisdictional boundaries; both corporate, and country? The latter question is of particular concern when one considers the potential for considerable variance between the regulations and policies of different governments and corporations. This is especially evident with the disparity of legislation for privacy in different countries. How can disparate regulations be accommodated effectively? What technologies are appropriate for maintaining user privacy and for protecting sensitive information for agent-based e-commerce? In this paper, we describe the issues that provoke privacy challenges for agent-based e-commerce due to current and impending privacy legislation as well as an approach for policy-driven privacy negotiation for use in distributed agent-based systems.

/pdf/privacy-in-distributed-electronic-commerce-3ypkffq92a.pdf

Privacy in distributed electronic commerce

Achieving the privacy needs for applications as expressed in law is complex. Currently there is no commonly accepted technical approach for meeting these privacy requirements. An often-fruitful way for uncovering solutions to challenges such as this is to examine how technologies used in quite different applications may be adapted for the purpose. In this paper, we examine the prospect of adapting systems designed for Digital Rights Management for the purpose of Privacy Rights Management for European Community. We begin by outlining the legal requirements for privacy under the European Union Data Directive. After an overview of digital rights management systems, we describe adaptations for transforming a DRM system into a privacy rights management system. We also detail the strengths and weaknesses of this approach.

/pdf/towards-meeting-the-privacy-challenge-adapting-drm-2mtcfe5tdv.pdf

Larry Korba

Papers

Semiautomatic Derivation and Use of Personal Privacy Policies in E-Business

Towards secure agent distribution and communication

Anonymous Communications for Mobile Agents

Privacy in distributed electronic commerce

Towards Meeting the Privacy Challenge: Adapting DRM