Trust-Assurance for Critical Infrastructure in Multi-Agents Environments - TITAN
Coordinating Institution:
CRP Henri Tudor
Contracting Partner(s):
University of Luxembourg
From: 01/01/2009
To: 31/12/2010
Budget: 482,000.00€
Contact(s):
Gâteau Benjamin
Progress Summary 2009
TITAN aims at achieving trust among networked components of a Critical Infrastructure (CI). In that sense, the goal of the project is to provide a rational model for trust, which could be incorporated to existing networks management systems to help warrant a better security management. As such, in WP1, a comparison of CI definitions and a survey of the literature related to real and virtual organizations models and their links with the notion of trust has been undertaken. In order to evaluate the definitions of trust we obtained, we had to apply them in real use-cases. This enabled us to define requirements and compare them to the models studied before in order to underline their drawbacks.
The comparison revealed that the definition of a trust model is not simple and the scope of the project is very large. In consequence, we decided to reduce the focus of the global top-down approach of the trust definition and work in specific parts. This would provide results that we could use at the end of the project to define a global trust from a bottom-up point of view. In that perspective, WP2 is now concerned with the provisioning of evidence (supported by quantitative indicators) that in-place security measures could adequately protect system assets. It is foreseen that such assurance indicators, which give an insight of a system security posture, would be pertinent in appraising the overall trust value in a system or its components. The work performed in the WP3 has targeted the enhancement of the responsibility model, which is the base of the elaboration of policy especially in CI. That latter has been completed by a decisional system.
It permits to make decision regarding the alert mechanism based on contextual and domain values (which include utility, probability and trust values along with the architecture component) as well as on environment information. In the WP4, we made a state of the art related to trust and reputation in Multi Agent Systems. This work has been done in order to deduct requirements based on assurance information for the multi organizational reputation model on the one hand, and on the order hand to built real scenario that puts in light gaps of the studied models. At last, in WP5, a distributed trust model was defined. It consists of trust metrics designed for resource bounded entities, probabilistic model of the evaluation of trustworthiness and robust trust data collection mechanism.
Refereed Scientific Publications:
- M. Seredynski and P. Bouvry. Evolutionary Game Theoretical Analysis of Reputation-based Packet Forwarding in Civilian Mobile Ad Hoc Networks. In Proc. of the 12th International Workshop on Nature Inspired Distributed Computing (NIDISC’09), IEEE Computer Society, Rome – Italy, 25-28 May, 2009.
- B. Gateau, D. Khadraoui and C. Feltus. Multi-Agents System Service based Platform in Telecommunication Security Incident Reaction. In Proc. of the IEEE Global Information Infrastructure Symposium (IEEE GIIS 2009), Hammamet – Tunisia, 22-26 June, 2009.
- C. Feltus, M. Petit and E. Dubois. Strengthening Employee's Responsability to Enhance Governance of IT – COBIT RACI Chart Case Study. In Proc. of the 1st ACM Workshop on Information Security Governance (ACM WISG 2009), Chicago – USA, 13 November, 2009.
- C. Feltus, D. Khadraoui and J. Aubert. A Security Decision-Reaction Architecture for Heterogeneous Distributed Network. In Proceedings of The Fifth International Conference on Availability, Reliability and Security (ARES 2010), Krakow – Poland, 15-18 February, 2010.
- C. Bonhomme, C. Feltus and D. Khadraoui. A Multi-Agent based Decision Mechanism for Incident Reaction in Telecommunication Network. In Proc. of ACS/IEEE International Conference on Computer Systems and Applications (AICCSA 2010), Hammamet - Tunisia, 16-19 May, 2010.
- M. Seredynski, T. Ignac and P. Bouvry. Probabilistic Packet Relaying in Wireless Mobile Ad Hoc Network. In Proc. of Parallel Processing and Applied Mathematics (PPAM 2009), Springer LNCS, September 2010.
Figure: Project axes