Table Of ContentTRUST MANAGEMENT
IFIP - The International Federation for Information Processing
IFIP was founded in 1960 under the auspices of UNESCO, following the First World
Computer Congress held in Paris the previous year. An umbrella organization for
societies working in information processing, IFIP's aim is two-fold: to support
information processing within its member countries and to encourage technology transfer
to developing nations. As its mission statement clearly states,
IFIP's mission is to be the leading, truly international, apolitical
organization which encourages and assists in the development,
exploitation and application of information technology for the benefit
of all people.
IFIP is a non-profitmaking organization, run almost solely by 2500 volunteers. It operates
through a number of technical committees, which organize events and publications.
IFIP's events range from an international congress to local seminars, but the most
important are:
• The IFIP World Computer Congress, held every second year;
• Open conferences;
• Working conferences.
The flagship event is the IFIP World Computer Congress, at which both invited and
contributed papers are presented. Contributed papers are rigorously refereed and the
rejection rate is high.
As with the Congress, participation in the open conferences is open to all and papers may
be invited or submitted. Again, submitted papers are stringently refereed.
The working conferences are structured differently. They are usually run by a working
group and attendance is small and by invitation only. Their purpose is to create an
atmosphere conducive to innovation and development. Refereeing is less rigorous and
papers are subjected to extensive group discussion.
Publications arising from IFIP events vary. The papers presented at the IFIP World
Computer Congress and at open conferences are published as conference proceedings,
while the results of the working conferences are often published as collections of selected
and edited papers.
Any national society whose primary activity is in information may apply to become a full
member of IFIP, although full membership is restricted to one society per country. Full
members are entitled to vote at the annual General Assembly, National societies
preferring a less committed involvement may apply for associate or corresponding
membership. Associate members enjoy the same benefits as full members, but without
voting rights. Corresponding members are not represented in IFIP bodies. Affiliated
membership is open to non-national societies, and individual and honorary membership
schemes are also offered.
TRUST MANAGEMENT
Proceedings of IFIPTM 2007: Joint iTrust and PST
Conferences on Privacy^ Trust Management and
Security^ July 30- August 2, 2007^ New Brunswick^
Canada
Edited by
Sandro Etalle
Distributed and Embedded System Group
University of Twente
The Nettierlands
Stephen Marsh
Information Security Group
Institute for Information Tecfinology
National Research Council
Canada
^ Sprriin ger
Library of Congress Control Number: 2007930361
Trust Management
Edited by S. Etalle and S. Marsh
p. cm. (IFIP International Federation for Information Processing, a Springer Series in
Computer Science)
ISSN: 1571-5736 /1861-2288 (Internet)
ISBN: 13:978-0-387-73654-9
elSBN: 13:978-0-387-73655-6
Printed on acid-free paper
Copyright © 2007 by International Federation for Information Processing.
All rights reserved. This work may not be translated or copied in whole or in part without the written
permission of the publisher (Springer Science+Business Media, LLC, 233 Spring Street, New York, NY
10013, USA), except for brief excerpts in connection with reviews or scholarly analysis. Use in
connection with any form of information storage and retrieval, electronic adaptation, computer software,
or by similar or dissimilar methodology now known or hereafter developed is forbidden.
The use in this publication of trade names, trademarks, service marks and similar terms, even if they are
not identified as such, is not to be taken as an expression of opinion as to whether or not they are subject
to proprietary rights.
9 8 7 6 5 4 3 21
springer.com
Preface
This volume contains the proceedings of the IFIPTM 2007, the Joint iTrust
and PST Conferences on Privacy, Trust Management and Security, held in Monc-
ton, New Brunswick, Canada from July 29th to August 2nd, 2007.
The annual iTrust international conference looks at trust from multidisci-
plinary perspectives: economic, legal, psychology, philosophy, sociology as well
as information technology, is built on the work of the iTrust working group
(http://www.itrust.uoc.gr), and has had four highly successful conferences in
Europe to date.
The annual PST conference has quickly established itself as a leader in mul-
tidisciplinary research on a wide range of topics related to Privacy, Security and
Trust, looked at from research and practice, through academe, business, and
government. 2007 marks the 4th year of PST's existence.
The two conferences come together in 2007 as the first annual meeting and
conference of the newly formed IFIP Working Group on Trust Management
(IFIP WGll.ll), a major step forward in Trust Management work globally.
IFIPTM 2007 received 76 submission from 25 different countries: Canada
(15), USA (10), United Kingdom (8), China (6), Finland, Italy (4), Korea,
Switzerland, France, Ireland, Spain, Germany, Denmark, Jordan, Poland, Kuwait,
Singapore, Iran, Netherlands, Japan, Luxembourg, Australia, Norway, Austria,
Tunisia. The program committee selected 25 papers for presentation and inclu
sion in the proceedings. In addition, the program and the proceedings include 4
short papers.
The highlights of IFIPTM 2007 included invited talks by industrial and aca
demic experts in the fields of trust management, privacy and security, including
Larry Korba from NRC-IIT, Brian O'Higgins of 3rd Brigade, Jim Robbins from
EWA, Jonathan Cave from RAND, Roger London, and Bruce Cowper from Mi
crosoft Canada.
Sponsors of the IFIPTM 2007 include the University of New Brunswick,
the National Research Council of Canada, Institute for Information Technology,
Microsoft Ql Labs, Third Brigade, Microsoft , EWA-Canada, and VE Networks,
to whom our thanks.
There are many people who contributed to the success of the conference,
without whom it would not exist, and to whom we owe our gratitude and thanks.
PC members and several other external referees provided timely and indepth
reviews of the submitted papers, and worked hard to select the best papers for
the conference program.
VI
Special thanks are due to Greg Sprague who has worked tirelessly to make
the conference a success. William Winsborough and John McHugh have, with
Greg, steered the conference from inception to reality. Stephane Lo Presti has
worked hard to bring the workshops and tutorials to fruition, with excellent
results, and on the ground Georges Corriveau has ensured a conference that's
not only academically interesting but culturally enriching also.
Scott Buffett and Ilia Goldfarb have done tremendous work getting the pro
ceedings you have in your hands ready, formatted, and looking as good as they
do now.
To all who have helped, our sincerest thanks. We hope you enjoy the pro
ceedings and the conference.
Ottawa, Canada and Twente, the Netherlands.
Sandro Etalle and Stephen Marsh
Program Committee co-Chairs
IFIPTM-07
Organization
IFIPTM 2007 Executive Commitee
Conference co-Chairs:
John McHugh, Dalhousie University, Nova Scotia, Canada
WilHam Winsborough, University of Texas at San Antonio, USA
Program co-Chairs:
Sandro Etalle, University of Twente, the Netherlands
Stephen Marsh, National Research Council, Canada
Workshop Chair:
Stephane Lo Presti, Royal Holloway, University of London, UK
Pubhcity Chair:
Emmanuele Zambon, University of Twente, the Netherlands
Local Arrangements:
Georges Corriveau, National Research Council, Canada
Program Committee
Scott Buffett, NRC, Canada
Elizabeth Chang, Curtin University of Technology, Australia
Theo Dimitrakos, British Telecom, UK
Sandro Etalle (chair). University of Twente, the Netherlands
Rino Falcone, CNR, Italy
Javier Garcia-Villalba, Universidad Complutense de Madrid, Spain
Ali Ghorbani, University of New Brunswick, Canada
Jim Greer, University of Saskatchewan, Canada
Milena Head, McMaster University, Canada
Peter Herrmann, NTNU, Trondheim, Norway
Valerie Issarny, INRIA, France
Sushil Jajodia, George Mason University
Christian Jensen, Technical University of Denmark, Denmark
Audun Josang, QUT, Australia
Dawn Jutla, Saint Mary's University, Canada
Yuecel Karabulut, SAP, Canada
Larry Korba, NRC, Canada
Javier Lopez, University of Malaga, Spain
Fabio Martinelli, HT-CNR, Italy
Steve Marsh (Chair), National Research Council, Canada
Vlll
Fabio Massacci, University of Trento, Italy
Ali Miri, University of Ottawa, Canada
Yuko Murayama, Iwate Prefectural University, Japan
Mogens Nielsen, University of Aarhus, Denmark
Christos Nikolaou, University of Crete, Greece
Sylvia Osborn, University of Western Ontario, Canada
Stefan Poslad, University of London Queen Mary, UK
Babak Sadighi, SICS, Sweden
Pierangela Samarati, University of Milan, Italy
Ravi Sandhu, George Mason University
Jean-Marc Seigneur, University of Geneva, Switzerland
Simon Shiu, Hewlett Packard, UK
Sean Smith, Dartmouth College, USA
Ketil Stoelen, SINTEF & University of Oslo, Norway
Sotirios Terzis, University of Strathclyde, UK
David Townsend, University of New Brunswick, Canada
Additional Referees
Mohd Anwar Kwang-Hyun Baek Adrian Baldwin Yolanta Beres
Enrico Blanzieri Damiano Bolzoni Roberto Speicys Cardoso Marco Casassa-Mont
Roberto Cascella Marcin Czenko Heidi Dahl Jeroen Doumen
Christopher Dutchyn Maria C. Fernandez Farookh Hussain Apu Kapadia
Yee Wei Law Mass Soldal Lund Chris Masone Ilaria Matteucci
Katsiarina Naliuka Tomas Olsson Andrew Patrick Marinella Petrocchi
Vidyasagar Potdar Atle Refsdal Philip Robinson Rodrigo Roman
Predrik Seehusen Ludwig Seitz Robin Sharp Bjoernar Solhaug
Terkel K. Tolstrup Artsiom Yautsiukhin Emmanuele Zambon
Table of Contents
Private Distributed Scalar Product Protocol with Application To Privacy-
Preserving Computation of Trust 1
Danfeng Yao, Roberto Tamassia and Seth Proctor
Trust Transfer in Distributed Systems 17
Changyu Dong, Giovanni Russello and Naranker Dulay
Trust without Truth 31
Michel Deriaz
Mining and Detecting Connection-Chains in Network Traffic 47
Ahmad Almulhem and Issa Traore
A Privacy-Aware Service Discovery Middleware for Pervasive
Environments 59
Roberto Speicys Cardoso, Pierre-Guillaume Raverdy and Valerie Issarny
Analysis of the Implicit Trust within the OLSR Protocol 75
Asmaa Adnane, Rafael Timoteo de Sousa Jr, Christophe Bidan and
Ludovic Me
Validating a Trust-based Access Control System 91
William Adams and Nathaniel J. Davis IV
Negotiation for Authorisation in Virtual Organisation 107
Shamimabi Paurobally
A Geo Time Authentication System 123
Leonardo Mostarda, Arianna Tocchio, Stefania Costantini and
Paola Inverardi
Content Trust Model for Detecting Web Spam 139
Wang Wei and Zeng Guosun
Applied Computational Trust in Utilities Management: a Case Study on
the Town Council of Cava de' Tirreni 153
Pierpaolo Dondio, Edmondo Manzo and Stephen Barrett
A Trust Protocol for Community Collaboration 169
Samuel Galice, Marine Minier and Stephane Ubeda
