报告题名: | DeSPoT: A Method for the Development and Specification of Policies for Trust Negotiation |
作者: | Håvaldsrud, Tormod; Møller-Pedersen, Birger; Solhaug, Bjørnar; Stølen, Ketil
|
出版者: | S
|
出版年: | 2012
|
发表日期: | 2012
|
国家: | 挪威
|
语种: | 英语
|
英文摘要: | Information systems are ever more connected to the Internet, which gives wide opportunities for interacting with other actors, systems and resources and for exploiting the open and vast marked. This pushes the limits for security mechanisms which in general are too rigorous to fully adapt to such a dynamic and heterogeneous environment. Trust mechanisms can supplement the security mechanisms in this situation to reduce the risk by means of trusted evidences. We propose DeSPoT, a method for the development and specification of policies for trust negotiation. The method supports the capturing of requirements for the trust policy as a specification of acceptable risk, and the specification of trust policies that fulfill the requirements. DeSPoT is created to be easy to use for business level experts, yet demonstrated in an industrial study to be useful for those who develop and maintain the system conducting trust negotiation within acceptable risk. Adherence to a DeSPoT policy should ensure that the target fulfills the organizational level requirements to the trust behavior, and that the target is not exposed to unacceptable risk. The paper gives an example-driven presentation of the method. Oppdragsgiver: Research Council og Norway |
URL: | https://brage.bibsys.no/xmlui/bitstream/handle/11250/2432379/SINTEF%2bA20174.pdf?sequence=1&isAllowed=y
|
资源类型: | 研究报告
|
标识符: | http://119.78.100.158/handle/2HF3EXSE/28798
|
Appears in Collections: | 过去全球变化的重建 影响、适应和脆弱性 科学计划与规划 气候变化与战略 全球变化的国际研究计划 气候减缓与适应 气候变化事实与影响
|
File Name/ File Size |
Content Type |
Version |
Access |
License |
|
SINTEF+A20174.pdf(6393KB) | 研究报告 | -- | 开放获取 | | View
Download
|
|
Recommended Citation: |
Håvaldsrud, Tormod,Møller-Pedersen, Birger,Solhaug, Bjørnar,et al. DeSPoT: A Method for the Development and Specification of Policies for Trust Negotiation. 2012-01-01.
|
|
|