Trusted Computing Research Articles

Guest Editorial Special Issue on Blockchain-Based Secure and Trusted Computing for IoT

The Internet of Things (IoT) is expected to connect a massive number of smart devices to the Internet. The existing centralized architecture for handling the huge volume of data created in the IoT is facing many research challenges, including security and privacy, trustworthiness, operational challenges, business models and the practical aspects, and legal and compliance issues. These challenges ask for new approaches to online identity, trustworthy transactions, and resilient networks.

Trust Evaluation Factors in Cloud Computing with Open Stack

Cloud computing can be used with three deploying models SAAS, IAAS, and PAAS. IAAS is the most adopted model used for research and innovations. On daily basis Tera bytes of data are being uploaded on the cloud. The Public cloud, Private cloud and hybrid clouds services are used by the people for hosting their applications and computations. One of the major obstacle used in selection of cloud service providers is the lack of trust on CSPs. CSPs are providing different levels of security according to the requirements of users. Proposed paper demonstrates the Trust evaluation, Trust calculation models, based on different security parameters like Turnaround time, Integrity, and reliability of data on cloud. How to select a cloud provider’s service, based on the derived parameters determines the trust value of service provider. A new dynamic trust calculation approach is proposed in this paper. Integrity, Turnaround time (TE) and reliability parameters are considered for trust evaluation. Comparative analysis of different cloud providers with real time calculations of different cloud machines are done and made a comparative analysis of the parameter, approximately 63% efficiency level is achieved while compiling the trust factor with standard cloud nodes. Open stack cloud software is used to create a cloud environment of the local machine which helps in compilation of the data at real time. Fog computing is used to calculate the results.

Data Centric Access Security- an Improvised Technique to Achieve Security in Cloud Environment

Cloud computing innovation has now turned into a good substitute to traditional computing technological developments This advancement of technology offers a new concept of a charge-per-use access resource model based primarily on virtualization technology. Because of the numerous advantages they offer, cloud computing concepts are achieving rapid adoption. This would comprise price-efficiency, time involved, and effective use of assets in computation. Given these advantages, there are many barriers to the widespread acceptance of this emerging technology, particularly data privacy and security issues. In extension to the conventional security hazards faced by internet-connected computer systems, cloud systems have relevant privacy and security problems due to the virtualization and multi-tenancy environment of the cloud. A further research target is focused on principles of Trust Computing (TC). Although these techniques offer users with mechanisms for evaluating and assessing security, they do not yield enough controlling functionality for users. In addition, Data Centric Security (DCS) is an evolving strategy intended to protect the data itself against migration towards the cloud.

COMITMENT: A Fog Computing Trust Management Approach

As an extension of cloud computing, fog computing is considered to be relatively more secure than cloud computing due to data being transiently maintained and analyzed on local fog nodes closer to data sources. However, there exist several security and privacy concerns when fog nodes collaborate and share data to execute certain tasks. For example, offloading data to a malicious fog node can result into an unauthorized collection or manipulation of users’ private data. Cryptographic-based techniques can prevent external attacks, but are not useful when fog nodes are already authenticated and part of a networks using legitimate identities. We therefore resort to trust to identify and isolate malicious fog nodes and mitigate security, respectively. In this paper, we present a fog COMputIng Trust manageMENT (COMITMENT) approach that uses quality of service and quality of protection history measures from previous direct and indirect fog node interactions for assessing and managing the trust level of the nodes within the fog computing environment. Using COMITMENT approach, we were able to reduce/identify the malicious attacks/interactions among fog nodes by approximately 66%, while reducing the service response time by approximately 15 s.

An uncertainty-aware computational trust model considering the co-existence of trust and distrust in social networks

There are few trust models capable of incorporating the co-existence of trust and distrust as distinct concepts. In this regard, most of the existing trust models implicitly use distrust parameters to refine and calculate trust values. However, recent studies have indicated that trust and distrust are two distinct but co-existing concepts. In other words, although trust and distrust are constructed based on different characteristics, they can be used together in the decision making and recommendation processes. In this paper, we present a trust-distrust model for social networks considering subjective and objective characteristics of trust and distrust simultaneously. Competence, honesty, satisfaction, similarity, motivation, availability, tendency to be trusted, the existence of long-term connection/friendship, and centrality are the trustworthiness characteristics covered by the model. Also, surprisal, dishonesty, dissatisfaction, conflict degree, account lifetime, and sudden changes in the number of friends, likes, and comments are the distrust characteristics considered by the model. The proposed model takes into account the uncertainty, sharpness, and vagueness of the beliefs by using subjective logic. The results of the conducted evaluations demonstrate that the proposed model is highly accurate in the decision-making process and has a 90% accuracy in calculating the trust and distrust. We have also compared the results with other similar approaches, by which the proposed model showed a 34% improvement.

A Two Hop Relay Battery Aware Mote Scheme for Energy Redeemable and Network Lifespan Improvement in WSN

The nodes available in the market are now of miniaturized nature, also have the characteristics of low cost and power values. Wireless Sensor Network (WSN) will be a sparse network with independent points acting as energy sources. The application in WSN includes temperature sensing, sound sensing, and pressure session. The data is sent from one point to other using multi intermediate nodes. The selection of intermediate nodes will be done based on computation of trust. As the number of hops increases energy consumption will become high and this can be improved with the help of relay node which can store the data and deliver the data once destination is in its range. The selection of relay node can be done in multiple ways like random, based on meeting probability and in the proposed two hop relay battery energy aware algorithm makes use of multiple factors namely residual energy, virtual currency based data, meeting probability, security computation so that the communication can be optimized. The proposed method is also compared with several existing methods with respect to delay, energy consumption, alive nodes, dead nodes, lifetime ratio and residual energy.

Data Security using Trust by Integrating WSN and CC and Reputation Calculation Technique

Integration of Cloud Computing and Wireless Sensor Network led tremendous growth in the development of Information Technology, during the trust and reputation of service providers for information technology play an essential role. Cloud computing is web-based computing was in the services based on the internet such as data, storage, and computing resources are delivered to the local devices through the internet. Wireless sensor network deals with monitoring, gathering of the information about the physical or environmental conditions. The integration of these two domains has tremendous advantages to improve the business infrastructure and performance worldwide. The security of data on the cloud and calculation of trust and reputation of the Cloud Service Provides (CSP) and Sensor Network Providers (SNP) are the issues for this new paradigm. To fulfill these issues This paper presents novel techniques, for 1) trust and reputation calculation 2) data security on cloud 3) choosing desirable CSP and SNP for the service. This paper proposes Data Security by taking into account the services of Wireless Sensor Network (WSN) and Cloud Service Providers. Our experimental results help users to choose the best service providers in case of both Cloud and Wireless Sensor Network. In addition to that, data security is provided using a data encryption algorithm.

Secure Group based Routing and Flawless Trust Formulation in MANET using Unsupervised Machine Learning Approach for IoT Applications

INTRODUCTION: Mobile Adhoc Network (MANET) is integrated with Internet of Things (IoT) in many application cases due to its flexibility and scalability. The dynamic nature of MANET introduces some security threats in IoT environment. In those threats, Blackhole attack and Grayhole attack are severe routing attacks that disrupts routing algorithm to crack transmission in the entire network. OBJECTIVES: Many security mechanisms are introduced in MANET based on trust computation schemes. However, computation of inaccurate trust value degrades the performance of mitigation schemes. Thus the major objective of this work is to design a novel security mechanism to protect the MANET-IoT from different adversaries. METHODS: in this paper we propose a novel group based routing algorithm with recommendation filtering supported by security monitors (SMs). Unsupervised machine learning algorithm is adapted for the purpose of recommendation filtering in the network. Initially the entire network is grouped by Secure Certificate based Group Formation (SCGF) algorithm. In each group, Recommendation Filtering by K-means algorithm (RF-K means) algorithm is employed to perform trust computation. For secure and optimal route selection, hybrid optimization algorithm that combines Genetic Algorithm and Fire Fly Algorithm (GA-FFA) is proposed. Data transmission is protected by novel Hash Message Authentication Code with Advanced Encryption Standard (HMAC-AES) algorithm in which hash function is integrated with cryptography function. RESULTS: The proposed work is validated in network simulator-3 environment and the obtained results show better performance in terms of packet delivery ratio (96.3%), throughput (135kbps), delay (3.26ms), detection rate (99%), and energy consumption (8.5%). CONCLUSION: The MANET-IoT network is secured by group formation and trust filtering approaches. Further, involvement of cryptography function ensures data security whereas hash function ensures data integrity.

A survey on privacy and access control schemes in fog computing

SummaryTo provide reliable data storage and retrieval services to the end users, the cloud service provider implements secure data storage, sharing, and retrieval mechanisms. However, the aforesaid services provided by cloud have certain pitfalls, such as decision latency and real‐time data computation. To address these aforementioned problems, fog computing was introduced for the purpose of providing cloud services at the network's edge. While this migration of the cloud services to the network's edge raises various security concerns, such as trust, authentication, mobility, intrusion, network security, and secure data computation. Among these concerns, the most critical issues that need immediate attention of researchers and practitioners are of privacy and access control in fog computing which are in direct relation to secure data storage and retrieval purposes. So, in order to highlight their importance for research community, this survey embodies to discuss, explain, and compare various privacy preserving and access control schemes in the context of fog computing for classifying and analyzing similarities and variances with respect to other researchers. Moreover, upon classification and analysis of these schemes, various open issues and future directions are also presented for researchers and practitioners for the purpose of enhancing security algorithms to address privacy and access control issues in fog computing.

CAN-TM

The increasing proliferation of Cloud Services (CSs) has made the reliable CS selection problem a major challenge. To tackle this problem, this article introduces a new trust model called Chain Augmented Naïve Bayes-based Trust Model (CAN-TM). This model leverages the correlation that may exist among QoS attributes to solve many issues in reliable CS selection challenge, such as predicting missing assessments and improving accuracy of trust computing. This is achieved by combining both the n-gram Markov model and the Naïve Bayes model. Experiments are conducted to validate that our proposed CAN-TM outperforms state-of-the-art approaches.

Trust, choice, and self-preservation: a computational approach

Trust tends to be described through the lens of a rational choice of a trustor driven by the trustworthiness of a trustee. This, however, does not exhaust scenarios where people seem to be comfortable trusting without having an actual choice or not trusting while having a selection of potential trustees. This paper proposes that there should be another force at work that only expresses itself through the rationality in situations of choice. It is the self-preservation that strongly influences our decisions, specifically when choices seem to diminish. Ignoring this force makes the theory of trust incomplete. This paper brings this area of social behaviour closer to computational trust by proposing a unifying model that builds on theories of social systems. It focuses specifically on the containment of complexity and the associated risk to self-preservation, where trust is not an option but a necessity. The model, by being both simple and expressive, can computationally explain several phenomena associated with trusting in situations where self-preservation may be under a threat. This is further demonstrated by several use cases.

Trust-Aware and Fast Resource Matchmaking for Personalized Collaboration Cloud Service

In data-intensive cloud collaboration services with tens of thousands of users and million-level resources, means of providing personalized and trust-aware services quickly and simultaneously is a challenging issue. In this paper, we propose Per-trust, a trust-aware and fast resource matchmaking scheme for personalized QoS guaranteeing in collaboration cloud service. First, an integrated and trust-aware service broking architecture is proposed across the collaborative cloud computing environment; this architecture can provide trust computing and personalized resource matchmaking capacities. Then, a resource clustering method is proposed based on the multidimensional properties of cloud resources; this method can accurately, quickly meet the personalized requirements of users. Finally, an innovative algorithm is proposed for the trust computing of service resources based on real-time and dynamic monitoring of data, thereby quickly and effectively providing trust-aware resource matchmaking. Different from existing methods, which focus only on QoS and trust issues, our approach adds a resource clustering step before QoS and trust evaluation. Three key components are organically combined, namely, service broking architecture, resource clustering, and security and QoS-related trust computing. To the best of our knowledge, this paper is the first to construct an integrated solving scheme for cloud resource matchmaking that can simultaneously satisfy the trustworthiness and personalization required by users. Theoretical and experimental results verify the effectiveness of the proposed scheme.

Design, development and evaluation of a human-computer trust scale

ABSTRACTNew technologies, data, and algorithms impact nearly every aspect of daily life. Unfortunately, many of these algorithms operate like black boxes and cannot explain their results even to their programmers, let alone to end-users. As more and more tasks get delegated to such intelligent systems and the nature of user interactions with them becomes increasingly complex, it is important to understand the amount of trust that a user is willing to place on such systems. However, attempts at quantifying trust have either been limited in their scope or not empirically thorough. To address this, we build on prior work which empirically modelled trust in user-technology interactions and describe the development and evolution of a human computer trust scale. We present results of two studies (N=118 & N=183) which were undertaken to assess the reliability and validity of the proposed scale. Our study contributes to the literature by (a) developing a multi-dimensional scale to assess user trust in HCI and (b) being the first study to use the concept of design fiction and future scenarios to study trust.

A dynamic trust model in internet of things

Indicating trust or distrust of a node is a key issue in the trust management of IoT. However, there are some challenges for the management with anonymous nodes, inaccurate communication, etc. Due to huge number of nodes in IoT, one of the possible solutions is predicting trust and distrust values. In this paper, we propose a dynamic trust model based on direct and indirect trust computation, and the most important part of a model, trust prediction. The prediction method mainly depends on the combination of exponential smoothing and a Markov chain. We employ exponential smoothing to predict trustiness and a Markov chain to fix the deviation of the prediction. To test our scheme, we create a simulation to evaluate its performance and effectiveness. The simulation results are encouraging.

A Conception for Identifying Trust Service Providers in Collaboration Cloud Computing

cloud computing model has proven to be effective and popular in offering the benefits such as virtually limitless storage volume, availability and scalability. Hence the cloud environment is managed by varied trust management models. Choosing the most suitable trust management model by the user is often a difficult task. Since there is multiple cloud services offering different level of performances with same functionalities it becomes hard for the user to detect and select the apt cloud service. Csps tend to offer cloud related services to the cloud users keeping sla in consideration. Depending on sort of csp administration offered the payment by the consumer end, each transaction is being evidently distinguished. Regrettably, since qos (quality of service) is not achieved, sla is not looked upon seriously. In various situations and recommendations, administration presence doesn’t fulfill the standards and reliability is compromised. The current research paper deals with the difficulty in choosing qualitative csp (cloud service provider). The proposal is of a methodology to reveal the csps trustworthiness pertaining to a cloud scenario. The various levels listed in this mechanism or methodology being: building up of cloud cluster environment, broker creation, machine agent, feedback provider and trust validation. The mentioned system of trust management gains fewer machine agents, feedback is given by external resources, highly effective in trust computing, cpu’s of machine won’t be left idle or sluggish. It can be stated that the proposed mechanism yield to be effective and feasible as validated by the performance analysis and experimental outcomes. The outcome demonstrates the effectiveness of the approach concerning services matching. With effective use of trust model specific service can be chosen by the cloud user.

Why Do Public Blockchains Need Formal and Effective Internal Governance Mechanisms?

With the birth and rise of cryptocurrencies following the success of Bitcoin and the popularity of 'Initial Coin Offerings,' public awareness of blockchain technologies has substantially increased in recent years. Many blockchain advocates claim that these software artefacts enable radically new forms of decentralised governance by relying upon computational trust created via cryptographic proof, obviating the need for reliance on conventional trusted third-party intermediaries. But these claims rest on some key assumptions, which this paper subjects to critical examination. It asks: can existing mechanisms and procedures for collective decision-making of public blockchains (which we refer to as internal blockchain governance) live up to these ambitions? By drawing upon HLA Hart's Concept of Law, together with literature from regulatory governance studies, we argue that unless public blockchain systems establish formal and effective internal governance, they are unlikely to be taken up at scale as a tool for social coordination, and are thus likely to remain, at best, a marginal technology.

Secure Hash Authentication And Cryptography Based Geographical Routing (SHAC-GR) For Wireless Sensor Networks

The expeditious growth in manufacturing anvils industries has lead towards the development of tiny devices. This growth has motivated to develop small and battery-operated sensor nodes that are widely adopted for establishing the reliable wireless communication. The wireless sensor based communication is generally divided into hierarchal and geographical deployment. Hierarchical system based approaches are widely studied in this field, limited work is present in the field of geographical WSN. In this work, we focus on the geographical WSN. Generally, these networks suffer from energy efficiency and security related issues. Hence, in this work we preset a combined approach to address these challenges. In order to mitigate the energy sparsity issue, we develop geographical routing scheme which selects the neighboring node based on residual energy of the node and distance from the sink node i.e. the maximum residual energy node from the neighboring node which is having less distance from the sink node is selected as next-hop. Due to this approach, the path computation and other network parameters computation is not required hence it reduces the power consumption. Further, we address the security issues where we present Hash modeling to secure the location, Key Exchange model for authentication by using ECDH approach , later we present ECIS based encapsulation method for data security and finally, a trust model based security system is developed. The trust computation of node helps to the routing whether to select the node for next hop or not. This multistage security approach is called as Secure Hash, Authentication and Cryptography based geographical routing (SHAC-GR) protocol. The proposed approach is simulated using MATLAB simulation tool and the performance of proposed approach is compared with existing technique that shows that the proposed approach improves the network performance in terms of network lifetime, energy and packet delivery rate.

Research on Trust Computing for Cloud Service Providers

Cloud computing has evolved over a decade and thrived to the state that Information Technology cannot survive without cloud. It has evolved in such a way that it is embedded in every one’s life. Though cloud has become integral part of every new software, still there are gaps in security features and customers keenly look into multiple aspects of cloud service provider features before choosing their appropriate CSP. More than cost and features Cloud Service Provider should gain trust of the clients to do more business. There are lot of factors involved to gain confidence of client such as transparency, cost, security etc. Also how flexible the provider can help in deploying for various light weight devices such as Internet of Things (IoT) also matters where in IoT is emerging industry. Concurrently Cloud Service capability to work in collaborative fashion and other machine learning features will also take into account by clients to choose their respective best fit Cloud Service Provider.

ITrust: identity and trust based access control model for healthcare system security

The patient and healthcare professionals use the Electronic Healthcare System (EHS) for accessing medical records from the remote locations via the Internet. The emerging healthcare system has several advantages such as better management of the healthcare data, streamlined collaboration, improvement of medical care, insurance purpose, medical data backup, etc. Regardless of its advantages, the sensitivity and openness nature of the healthcare system arises different type of attacks and threats such as insider attack, service hijacking, abuse use of healthcare data, and impersonation attack. In the EHS, without knowing the prior information of the requester, data sharing is another considerable issue. Hence, a dynamic Access Control Model (ACM) is needed to overcome the above-discussed issues. In the EHS, the addition of trust into the access control solutions can provide dynamic access to the resources. To achieve such a model, in this paper, we have added user trust into the Identity Based Access Control (IBAC) model. For the computation of user trust, we have used beta reputation approach. An access control rule set has been proposed based on the trust degree and identity of the user to provide access in a controlled manner. This hybrid ACM and rule set not only protect the data from unauthorized access but also dynamically control the access view of the healthcare data. The experimental result of the proposed model shows that it is more accurate and reliable as compared to other trust models.

An Attack-Resistant Trust Inference Model for Securing Routing in Vehicular Ad Hoc Networks

The problem of routing security in vehicular ad hoc networks has become a major concern for researchers. Compared with cryptography-based solutions, trust-based solutions are considered to be more acceptable as a promising approach, which mainly define two operations: trust computing and security application. In this paper we first study trust properties and construct a novel trust inference model, where two trust attributes named subjective trust and recommendation trust, are selected to quantify the trust level of a specific vehicle. The SCGM(1,1)-weighted Markov prediction algorithm based on fluctuation recognition is utilized to calculate the subjective trust accurately, meanwhile a new evaluation method of recommendation credibility based on the feedback mechanism is introduced for the calculation of recommendation trust. We subsequently exploit the advantages of mesh structure and design a light-weight trust-aware multicast routing protocol (i.e., LTMRP), which can establish secure and reliable communication paths by selecting trusted relay vehicles. To further improve the routing efficiency, two mechanisms including forwarding nodes reuse mechanism and trust-aware route handoff mechanism are proposed. Simulation verification and comparison of the relevant trust models and trust-based protocols are accomplished by three simulation platforms (i.e., Netlogo, SUMO, and NS-2).The convincing results show that our trust model obtains strong resistibility to multiple malicious attacks. Moreover, examined in four routing metrics, the experimental results indicate that LTMRP performs better than the other relevant protocols.