Trusted Entity Research Articles

Trust-Aware Information Dissemination in Social Network

Information dissemination security is a crucial factor for social network interaction. In this paper, we present a trust-aware information dissemination algorithm for social network in order to make the nodes transmitting more trustable information. Firstly, we propose information trust computation from two aspects: entity trust of information and source trust. Two above aspects can be integrated into whole trust of information. Likewise, we propose the trust relationship comutation method among nodes. Further, we present a multiple paths trust computation method (MPTC) for information dissmination in social network. Then, we address the trust-aware information dissemination algorithm (TIDA) based on above trust computaiton. Finally, our experiments show that TIDA is a feasible and effective solution for social network information dissemination.

Application of Fuzzy Comprehensive Evaluation Method in Trust Quantification

Trust can play an important role for the sharing of resources and information in open network environments. Trust quantification is thus an important issue in dynamic trust management. By considering the fuzziness and uncertainty of trust, in this paper, we propose a fuzzy comprehensive evaluation method to quantify trust along with a trust quantification algorithm. Simulation results show that the trust quantification algorithm that we propose can effectively quantify trust and the quantified value of an entity's trust is consistent with the behavior of the entity.

A Cross‐Cultural Study of Perceived Benefit Versus Risk as Mediators in the Trust‐Acceptance Relationship

Several recent studies have identified the significant role social trust in regulatory organizations plays in the public acceptance of various technologies and activities. In a cross-cultural investigation, the current work explores empirically the relationship between social trust in management authorities and the degree of public acceptability of hazards for individuals residing in either developed or emerging Latin American economies using confirmatory rather than exploratory techniques. Undergraduates in Mexico, Brazil, and Chile and the United States and Spain assessed trust in regulatory authorities, public acceptance, personal knowledge, and the risks and benefits for 23 activities and technological hazards. Four findings were encountered. (i) In Latin American nations trust in regulatory entities was strongly and significantly (directly as well as indirectly) linked with the public's acceptance of any activity or technology. In developed countries trust and acceptability are essentially linked indirectly (through perceived risk and perceived benefit). (ii) Lack of knowledge strengthened the magnitude and statistical significance of the trust-acceptability relationship in both developed and developing countries. (iii) For high levels of claimed knowledge, the impact on the trust-acceptability relationship varied depending upon the origin of the sample. (iv) Confirmatory analysis revealed the relative importance of perceived benefit over perceived risk in meditating the trust-acceptability causal chain.

Domain-Based Level Trust Manage Model

Draw on the trust relationship of human society, domain model and domain trust are introduced to build domain-based level trust manage model (DLTMM). In various domains, according to physical services characteristics of their own, entities abstract representative attribution. According to their preferences the service requester preferences comprehensive evaluate the service attributions, and to determines whether transaction; After trading, the service requester will calculate the difference degree of quality of service according to the actual quality of service and the claimed quality of service, and then judge the trust degree of service provider. The simulation results show that the model can more accurate assessment of the trust entity, to some extent effective against malicious attacks, which proves the validity and accuracy of the model.

Trust Evaluation Model based on Service Satisfaction

In most of the current trust model, the evaluation of whether an entity is trust is different to different judger. The reason of this phenomenon is that different judger use the different standard in its opinion. So the evaluation lack of convincing, are not well describe the relationship between two parties. In response to these issues, drawing on the trust relationship between human societies, the introduction of the domain and domain trust, building the trust evaluation model based on service satisfaction. In every domain according to the service of the node itself, abstracting representative multiple service attributes from the trusted relationship of the node service, service requester comprehensive evaluates multiple service attributes provided by service provider based on personal interest, and combines with the trust value, decide whether to trade finally; after the transaction, service request calculates QoS(quality of service) difference degree according to actual QoS and service provider’ own QoS claimed to judge the credibility of service provider, then gives corresponding rewards and punishment and trust update. The simulation results show that the model can more accurate assessment of the trust entity, to some extent effective against malicious attacks, which proves the validity and accuracy of the model.

Application of Fuzzy Comprehensive Evaluation Method in Trust Quantification

Trust can play an important role for the sharing of resources and information in open network environments. Trust quantification is thus an important issue in dynamic trust management. By considering the fuzziness and uncertainty of trust, in this paper, we propose a fuzzy comprehensive evaluation method to quantify trust along with a trust quantification algorithm. Simulation results show that the trust quantification algorithm that we propose can effectively quantify trust and the quantified value of an entity's trust is consistent with the behavior of the entity.

Situation-aware trust architecture for vehicular networks

We present a new trust architecture-Situation-Aware Trust-to address several important trust issues in vehicular networks. SAT includes three main components: an attribute-based policy control model for highly dynamic communication environments, a proactive trust model to build trust among vehicles, and prevent the breakage of existing trust, and an email-based social network trust system to enhance trust and to allow the set up of a decentralized trust framework. To deploy SAT, we utilize identity-based cryptography to integrate entity trust, data trust, security policy enforcement, and social network trust, allocating a unique identity, and a set of attributes for each entity. We conclude by presenting research challenges and potential research directions that extend this work.

A Trust Transitivity Model Based-on Dempster-Shafer Theory

With the expansion of the Internet, Trust has attracted the attention of more and more researchers. This paper focuses on the trust transitivity problem and proposes a trust transitivity model based on Dempster-Shafer Theory. In our model, we show two types of trust relationship: Identity Trust and Behavior Trust based on Directness Trust and Recommendation Trust. Then we build the trust transitivity network and propose the trustworthiness propagation and combination rules. Finally, we propose a method for transforming the triple of evidence theory to a simple result in order to select the trust entity easily. W e also use the nearness degree to analyze the transitivity rationality and show how to use the trust transitivity model by a shopping scenario in TaoBao and illustrate its legitimacy

Toward publicly auditable secure cloud data storage services

Cloud computing is the long dreamed vision of computing as a utility, where data owners can remotely store their data in the cloud to enjoy on-demand high-quality applications and services from a shared pool of configurable computing resources. While data outsourcing relieves the owners of the burden of local data storage and maintenance, it also eliminates their physical control of storage dependability and security, which traditionally has been expected by both enterprises and individuals with high service-level requirements. In order to facilitate rapid deployment of cloud data storage service and regain security assurances with outsourced data dependability, efficient methods that enable on-demand data correctness verification on behalf of cloud data owners have to be designed. In this article we propose that publicly auditable cloud data storage is able to help this nascent cloud economy become fully established. With public auditability, a trusted entity with expertise and capabilities data owners do not possess can be delegated as an external audit party to assess the risk of outsourced data when needed. Such an auditing service not only helps save data owners¿ computation resources but also provides a transparent yet cost-effective method for data owners to gain trust in the cloud. We describe approaches and system requirements that should be brought into consideration, and outline challenges that need to be resolved for such a publicly auditable secure cloud storage service to become a reality.

A Multi-Layered Approach to the Design of Intelligent Intrusion Detection and Prevention System (IIDPS)

Introduction Considering the reliance of humans on computers and network infrastructures to perform virtually every aspect of day to day activity, there is a critical need for ensuring the reliability and integrity of these infrastructures. According to the National Institute of Standards and Technology, Intrusion is an attempt to compromise the confidentiality, integrity, availability or an attempt to bypass the security mechanisms of a computer or network (Jones & Sielkens, 2000). The reasons for these intrusions could be attempts to steal a company's most valuable information, personal employee and customer information or to use the company's computer resources, etc. For example, the 2003 CSI/FBI (Computer Security Institute/ Federal Bureau of Investigation) Computer Crime and Security Survey reported that participants in the survey lost about $135 million from the theft of proprietary information and denial of service attacks (Cisco Systems, 2004). Recently, Intrusion Detection Systems (IDS) have been used in monitoring attempts to break security, which provides important information for timely countermeasures (Chen, Abraham, & Yang, 2007). Intrusion Detection System (IDS) implements application monitors in the form of a software program to learn and monitor the behavior of system programs in order to detect attacks against computer hosts. Existing IDSs are built with either signature-based or anomaly-based system, Signature matching is based on a misuse model, this intrusion detection system detects intrusions by looking for activities that corresponds to known intrusion techniques(signatures)or system vulnerabilities while anomaly detection is based on a normal use model (Hwang, Cai, Chen, & Qin, 2007), they detect intrusion by looking for activities that is different from a user's or systems normal behavior. They may be classified into Host-based and Network-based according to the information used by each IDS. A Host-based IDS refers to the class of intrusion that resides on the monitor and the individual host machine, while A Network-based IDS monitors the packets that traverse a given network link (Jones & Sielken, 2000). The system proposed here is a type Host-based intrusion detection systems (HIDSs),these type of systems rely on events collected by the host they monitor .HIDSs can be classified based on the type of audit data they analyze or based on the techniques used to analyze their input. Common classes: * operating system-level intrusion detection systems * application-level intrusion detection systems The system proposed here is an operating system-level intrusion system, because the OS is a trusted entity and it controls access to resources, such as memory and files. Overview of Existing Systems From the literature, there are various works in the field of intrusion detection system. This paper reviews those that are closely related to the proposed work based on the Anomaly and Signature detection approaches and the combination of both. In order to ascertain the efficiency of the new approach, a comparison is drawn between the existing work that have used the combination of both approaches and the new system which shows further improvement over the existing ones. Adaptable Real-time Misuse Detection System (ARMD) (1998) is a host-based misuse detection system. Its pattern of signatures is over a sequence of abstract events and this is tagged MuSig'. This describes conditions that the abstract event attributes must satisfy. Based on the signatures (MuSigs), the available audit trail, and the strategy costs, ARMD uses a strategy generator to automatically generate monitoring strategies to govern the misuse detection process. It employs database query optimization techniques to speed up the processing of audit events. One advantage of ARMD is that knowing the characteristics of the audit trail helps estimate the cost of performing misuse detection and this gives the security officers the opportunity to tune the misuse detection system. …

Secure multiparty payment with an intermediary entity

During the last years, many secure electronic payment solutions have been proposed but most of them are focused on the traditional two-party business models with a customer and just one provider. In this paper we propose a new secure multiparty payment model with an intermediary, who helps the customer to make purchases and payments with many providers simultaneously. In our secure infrastructure it is assumed that the intermediary does not need to be a trusted entity (it does not need to be a TTP). One of the most important issues of this contribution is the Intermediary-3D: we propose a simple adaptation of the 3D Secure™ payment protocol in order to maintain the 3D Secure™ working modes but offering the possibility of making multiple secure payments through an intermediary. By means of this slight adaptation, our model avoids the provider's enrolment process in a centralized system (e.g. Visa Domain) and it makes more robust and secure the multipayment scenarios, as well as, it favors its deployment in global networks like Internet.

An empirical study for the direct and indirect links between trust in regulatory institutions and acceptability of hazards

Several studies have identified a significant relationship between trust in regulatory institutions and the extent of a hazard’s acceptability. Many, however, have overlooked the potential impact perceived risk and perceived benefit may have on the relationship. Our principal goal is to assess empirically the link between social trust in regulatory entities and the degree of public acceptability of hazards in view of interactions among social trust, perceived risk, perceived benefit and public acceptability. A survey was conducted in 2006 in three cities representative of central Mexico. A total of 356 participants answered the survey. Each participant assessed 30 hazards for perceived risk, perceived benefit, acceptability, social trust in regulatory entities, and personal knowledge. Our main finding was that social trust retained a direct as well as an indirect causal link with the degree of a hazard’s public acceptability, independent of hazard, the extent of knowledge, and the magnitude of the hazard’s perceived risk and benefit. The relationship encountered between perceived risk and acceptability was unexpected, as numerous studies have demonstrated empirically the influence perceived risk on how acceptable an activity or technology is. In our results the statistical significance of the perceived risk-acceptability relationship practically disappeared when controlled for institutional trust and perceived benefit. In other words, the net linear relationship between perceived risk and acceptability is mediated by the extent of social trust and the benefit perceived. Comparisons with several prior studies are conducted, and implications for regulatory entities are discussed.

Establishing a Nonprofit Organization: A Venture of Social Entrepreneurship

Demetrius Porche Denise Danna Nurse practitioners (NPs) have an opportunity to integrate their advanced practice nursing knowledge with their business acumen through the establishment of a nonprofit organization. In the health care environment, nonprofit organizations are established as service organizations, a nonprofit corporation, trust, charity or philanthropic entity, cooperative venture, or a purely mission-driven organization. A social entrepreneur uses nonprofit organizations for a socially driven issue.

Trust, acceptance and knowledge of technological and environmental hazards in Chile

Studies over the past decade have found empirical links between trust in risk management institutions and the risk perceptions and acceptability of various individual hazards. Mostly addressing food technologies, no study to date has explored wider possible relationships among all four core variables (risk, benefit, trust and acceptability) covering a heterogeneous group of hazards. Our prime objective was to ascertain effects among social trust in regulatory entities, and the public's perceived risk, perceived benefit and the degree of acceptability towards both technological and environmental hazards. We also assess whether trust in regulatory authorities is the cause (causal model) or a consequence (associationist model) of a hazard's acceptability for a wide and heterogeneous range of hazards on all four core variables. Using a web‐based survey, 539 undergraduates in Chile rated the five variables across 30 hazards. Implications for technology and environmental risk management organizations are discussed. Independent of the magnitude of the perceived risk or benefit surrounding a given hazard, or how knowledgeable the public claim to be of it, the trust sustained in regulatory institutions will either generate or be the consequence of public attitudes towards the hazard.

Scalable Revocation in Hybrid Ad Hoc Networks: The SHARL Scheme

The article proposes a simple, scalable and robust scheme for the distribution of revocation information in mobile ad hoc networks (MANETs). The scheme is intended for ad hoc networks with a planned origin, and where a common point of trust exists. Mobile ad hoc networks have limited available bandwidth. The revocation lists must therefore be specific to the network. They are established with the aid of trusted gateways reporting the identity of the nodes to a central trusted entity. To minimize overhead, the revocation lists are distributed along with the routing messages. In the articles we discuss how the scheme can be implemented in conjunction with the predominant routing protocols in ad hoc networks. The article also provides a detailed security analysis of the proposed protocols, partly based on the use of formal methods.

Distributed key management for dynamic groups in MANETs

Most existing solutions to group security in Mobile Ad Hoc Networks (MANETs) rely on a multicast Core Based Tree (CBT) for key distribution. Such solutions, although suitable for systems with low mobility and static characteristics, are unsuitable for dynamic and sparse groups with changing neighborhoods. In this paper, we propose an entirely decentralized key generation mechanism, employing a central trusted entity only during initialization. Using our approach, keys can be established between group members with absolutely no prior communication. The solution relies on threshold cryptography and introduces a novel concept of Node-Group-Key (NGK) mapping. We have provided an extensive analytical model for the computations involved and communication costs and have also provided a lie detection mechanism. Simulation results show appreciable performance improvement and enhanced robustness.

A Prestige Reporting Mechanism Based on Gray System Theory

Trust is an important causation between seller and customer in the successful network business, and the prestige of merchant is a vital factor that customers take into account when they select bargainer. In the traditional trust evaluation methods, various hypotheses are put forward for the evaluated entities, and the inveracious recommendation of malicious customers can not be avoided, so the objectivity and creditability of the evaluation result is affected. To the above questions, a mechanism scheme based on the gray system theory is put forward in this paper. It is proved that in the t time, the existence of the entity' gray relation degree is sufficient and necessary. In this scheme, original data is firstly collected through using taste concourse method, the evaluated entities are regarded as clustering entities, and the grade point value of their key attributes given by customers are regarded as the basis of valuation. Using a gray relation analytical method, the evaluated vectors of the entities can be gotten. Through inducing and adjusting according to the arranged gray level, gray level of the clustering entity is judged, and trust degree of the entity can be obtained. The actual mark of the entity' key attributes given by customers are regarded as the basis of valuation in this scheme. Gray number close to fact is adopted as the expressive mode so that the various hypotheses are avoided. Original data is collected through using taste concourse method and it can effectively avoid malicious recommendation. In the example, it is explained that entity's trust is quantified and trust among entities can be compared. The scheme has some advantages, such as credible evaluation, strong maneuverability, and suiting for the automatic processing of software, etc .It is a practical and valuable new method to evaluate entity's trust degree in network circumstance.

Exploring Comparative Ratings and Constituent Facets of Public Trust in Risk Regulatory Bodies and Related Stakeholder Groups

This paper reports on two comparative ranking tasks performed by a sample of the British citizens (N = 304). The first was designed to compare levels of relative trust vested in a sample of UK risk regulatory bodies and associated stakeholder groups. The second sought to elicit a ranking of a range of previously identified facets of social trust referenced to their desirability as attributes of a government funded risk regulatory body. The ranking tasks were embedded within a broader programme of research focused on “Evaluating public understandings of and trust in the Health and Safety Executive” (Pidgeon et al., 2003). It is argued that deriving rankings of multi‐faceted phenomena using the method of paired comparisons offers a more robust approach to rating social trust entities than the direct ranking techniques used in previous studies in this area. Results are discussed with reference to qualitative findings from the broader programme of work on public trust in HSE (Pidgeon et al., 2003) and the wider literature on public trust in risk regulation.

Genetic research and testing in critical care: Surrogates’ perspective*

Genetic testing is increasingly a component of clinical research in critical illness and has potential for integration into routine care. This study explored the perspectives of surrogate decision-makers (SDMs) for acutely ill patients with respect to social, legal, and ethical aspects of genetic testing. Medical and surgical intensive care units in an urban tertiary care hospital. Questionnaires administered to SDMs for critically ill patients over a 12-month period. A majority of eligible SDMs participated (117/146; 80.8%). SDMs were more likely to permit genetic testing for purposes of diagnosing a treatable life-threatening disease (114/117; 97.4%) or chronic disease (111/117; 94.9%) than for an untreatable life-threatening illness (95/117; 81.2%) (p < .001). SDMs were receptive to testing to explain familial traits (112/117; 95.7%) or ethnic traits (105/117; 89.7%) (p = .131). SDMs were concerned about potential for economic discrimination, with a majority expressing reluctance to permit testing if employers (93/117; 79.5%), health insurers (90/117; 76.9%), or life insurers (92/117; 78.6%) could access results. There was a greater willingness to allow participation in studies in which data were collected anonymously (90/117; 76.9%) vs. nonanonymously (75/117; 64.1%) (p = .04). Finally, SDMs placed greater trust in universities and nonprofit organizations (107/117; 91.4%) than either the federal government (75/117; 64.1%) or pharmaceutical companies (46/117; 39.3%) to perform genetic research (p < .01). SDMs expressed concerns regarding economic discrimination, confidentiality of data, and trust in entities conducting clinical investigation that may represent barriers both to performing studies in which genetic information is collected and to implementation of gene-based technologies in the critical care environment.

Strategic information management in health care - myth or reality?

This paper uses data gathered from a case NHS Trust in Scotland to demonstrate progress in terms of operational and strategic information management and to highlight some of the problems currently experienced in the health-care environment in striving to comply with governmental policies relating to information sharing. Progress has certainly been made and there is recognition of the potential to be achieved from more efficient and effective information management in health care. Problems exist, however, and there is still a considerable gap to be filled between the policy objectives and what is actually achievable in reality on a day-to-day basis. Data have been gathered from a hospital and a health centre to illustrate information flow between two of the Trust entities and a benchmark has been provided, showing that best practice can be achieved and how it can be achieved.