Why Isn't Trust Transitive?
Bruce Christianson,William S. Harbison +1 more
- pp 171-176
TLDR
The notion of trust is distinguished from a number of other (transitive) notions with which it is frequently confused, and it is argued that “proofs” of the unintensional transitivity of trust typically involve unpalatable logical assumptions as well as undesirable consequences.Abstract:
One of the great strengths of public-key cryptography is its potential to allow the localization of trust. This potential is greatest when cryptography is present to guarantee data integrity rather than secrecy, and where there is no natural hierarchy of trust. Both these conditions are typically fulfilled in the commercial world, where CSCW requires sharing of data and resources across organizational boundaries. One property which trust is frequently assumed or “proved” to have is transitivity (if A trusts B and B trusts C then A trusts C) or some generalization of transitivity such as *-closure. We use the loose term unintensional transitivity of trust to refer to a situation where B can effectively put things into A's set of trust assumptions without A's explicit consent (or sometimes even awareness.) Any account of trust which allows such situations to arise clearly poses major obstacles to the effective confinement (localization) of trust. In this position paper, we argue against the need to accept unintensional transitivity of trust. We distinguish the notion of trust from a number of other (transitive) notions with which it is frequently confused, and argue that “proofs” of the unintensional transitivity of trust typically involve unpalatable logical assumptions as well as undesirable consequences.read more
Citations
More filters
Enhancing End User Security | Attacks & Solutions
TL;DR: A general introduction to the security techniques and protocols used in this thesis are provided, followed by a review of possible threats to end user computing environments and a discussion of the countermeasures needed to combat these threats.
Journal ArticleDOI
Trust Management Models for Digital Identities
Prasann Pradhan,Vikas Kumar +1 more
TL;DR: The need and significance of trust management in the digital environment is presented, along with the various models and techniques available to manage the trust, and a comparative analysis has been presented.
Dissertation
Trust beyond reputation: Novel trust mechanisms for distributed environments
TL;DR: StereoTrust is introduced, a stereotyping based computational trust model that uses an intuitive and heuristic method to derive and combine stereotypes for trust assessment and helps develop novel mechanisms that support “trust beyond reputation”.
Proceedings ArticleDOI
An Endorsement Trust Model
TL;DR: This work proposes an institutional trust promoting mechanism that allows all vital data to be endorsed by category specific endorsement intermediaries with established trust relationships, providing a much stronger basis for e-commerce trust propagation than past transitive trust models.
References
More filters
Journal ArticleDOI
A logic of authentication
TL;DR: This paper describes the beliefs of trustworthy parties involved in authentication protocols and the evolution of these beliefs as a consequence of communication, and gives the results of the analysis of four published protocols.
Book
Firewalls and Internet Security: Repelling the Wily Hacker
TL;DR: The first edition made a number of predictions, explicitly or implicitly, about the growth of the Web and the patterns of Internet connectivity vastly increased, and warned of issues posed by home LANs, and about the problems caused by roaming laptops.
Proceedings ArticleDOI
Reasoning about belief in cryptographic protocols
TL;DR: A mechanism is presented for reasoning about belief as a systematic way to understand the working of cryptographic protocols and places a strong emphasis on the separation between the content and the meaning of messages.
Book
Firewalls and Internet Security
TL;DR: The 2-amino-3-bromoanthraquinone which is isolated may be used for the manufacture of dyes and is at least as pure as that obtained from purified 2- aminoanthraquin one by the process of the prior art.