Trust management system for grid and cloud resources

IEEE CCECE2002. Canadian Conference on Electrical and Computer Engineering. Conference Proceedings (Cat. No.02CH37373), 2002

A Grid computing system is a geographically distributed environment with autonomous domains that share resources amongst themselves. One primary goal of such a Grid environment is to encourage domain-to-domain interactions and increase the confidence of domains to use or share resources (a) without losing control over their own resources, and (b) ensuring confidentiality for others. To achieve this, the "trust" notion needs to be addressed so that trustworthiness makes such geographically distributed systems become more attractive and reliable for day-today use. In this paper, we view trust in two steps: (a) verifying the identity of an entity and what that identity is authorized to do, and (b) monitoring and managing the behavior of the entity and building a trust level based on that behavior. The identity trust has been the focus of many researchers, but unfortunately the behavior trust did not catch much attention. We present a formal definition of behavior trust and reputation and discuss a behavior trust management architecture that models the process of evolving and managing of behavior trust in Grid computing Systems.

IEEE 10th International Symposium on Pervasive Systems, Algorithms, and Networks, 2009

The migration of processing of computational jobs from centralized systems to open distributed systems have resulted in many communication channels and transactions. These crucial and confidential jobs span a range of domains and organizations, not all of which can be trusted to the same extent. Inconsistencies in current trust relationships highlight the need for a flexible, general-purpose trust management system. In this paper, we have proposed a Trust Model for establishing and evaluating trust in Grid environments. The proposed Trust model computes reputation and trustworthiness of the transacting domain on the basis of number of past transactions and rated feedback score.

2008

The Trust and Security activity in CoreGRID runs as a horizontal integration activity related to all the research areas, making the Network participants aware of the use of the technologies associated with trust and security. This paper presents an overview of the different concepts and technologies relevant to trust and security in Grid systems. It analyses the relation between trust and security, describes trust and security challenges in the Grid, and introduces the existing mechanisms for managing trust and security. The core of the document is the trust and security requirements across the CoreGRID Institutes, and the description of the work being carried out to meet such requirements. This research work is carried out under the FP6 Network of Excellence CoreGRID funded by the European Commission (Contract IST-2002-004265). 1 DIA16]. The document is organised as follows. The next section analyses the relation between trust and security, and prepares the content of the rest of the paper. Then, section 3 presents trust and security challenges in the Grid, and describes the existing mechanisms for managing trust and security. Section 4 discusses the impact of trust and security in the areas tackled by CoreGRID Institutes. Finally, Section 5 concludes the paper by summaring the work and highlighting future work. 2 Trust and Security In the Internet world, trust has been recognised as an important aspect of decision making for electronic commerce [Gra00, Jos07]. Customers must trust that sellers will provide the services they advertise, and will not disclose private customer information (name, address, credit card details, etc). Trust in the supplier's competence and honesty will influence the customer's decision as to which supplier to use. Sellers must trust that the buyer is able to pay for goods or services, is authorised to make purchases on behalf of an organisation or is not underage for accessing service or purchasing certain goods. How is the situation in the Grid? Fundamental to the Grid definition is the idea of resource sharing [Fos01]. The Grid was initiated as a way of supporting scientific collaboration, where many of the participants knew each other. In this case, there is an implicit trust relation, all partners have a common objective-for instance to realise a scientific experiment-and it is assumed that resources would be provided and used within some defined and respected boundaries. However, when the Grid is intended to be used for business purposes, it is necessary to share resources with unknown parties. Such interactions may involve some degree of risk since the resource user cannot distinguish between high and low quality resource providers on the Grid. The inefficiency resulting from this asymmetry of information can be mitigated through trust mechanisms. This section analyses the concept of trust and its relation with security. There is a vast source of information on the theory and application of trust, For instance [Cas00, Wai02, Nix03, Jen04, Her05]. Here we visit the main definitions of trust and study the relation between trust and security. 2.1 Trust Definitions This report focuses on trust in the context of networked and distributed computing systems. In this context, the remote system needs to be trusted, as well as interactions over underlying services such as communication services. As expressed by Grandison and Sloman [Gra00], the significance of incorporating trust in distributed systems is that trust is an enabling technology. Its inclusion will enable secure electronic transactions. There is not consensus in the literature on what trust is [McK96]; it is recognised as an important and complex subject relating honesty, truthfulness, competence, reliability, etc. of the trusted person or service. One of the influential works towards a practical definition of trust is given by Gambetta [Gam88b]: "When we say we trust someone or that someone is trustworthy, we implicitly mean that the probability that he will perform an action that is beneficial or at least not detrimental to us is high enough for us to consider engaging in some form of cooperation with him. Correspondingly, when we say that someone is untrustworthy, we imply that that probability is low enough for us to refrain from doing so". Gambetta's definition stresses that trust is fundamentally a belief or estimation, which has inspired the use of subjective logic as a way of measuring trust [Jos99]. Castelfranchi and Falcone [Cas98] extend Gambetta's definition to include the notion of competence along with predictability. Kini and Choobineh [Kin98] examine trust from the perspectives of personality theory, sociology, economics and social psychology. They highlight the implications of these definitions and combine their results to create their definition of trust in a system. They define trust as: "a belief that is influenced by the individual's opinion about certain critical system features". Their analysis covers various aspects of human trust in computer dependent systems but they do not address the issue of trust between parties (humans or processes) involved in e-commerce transactions. In the Trust-EC project of the European Commission Joint Research Centre (ECJRC), Jones [Jon99] defines trust as "the property of a business relationship, such that reliance can be placed on the business partners and the business transactions developed with them". Jones states as relevant issues such as the identification and reliability of business partners; the confidentiality of sensitive information; the integrity of valuable information; the prevention of unauthorised copying and use of information; the guaranteed quality of digital goods; the availability of critical information; the management of risks to critical information; and the dependability of computer services and systems.

In a Grid Computing scenario, where the market players are dynamic; traditional assumptions for establishing and evaluating trust, do not hold good anymore. There are two different methods for handling access controls to the resources in grids: first by using policy based approach; where logical rules and verifiable properties are encoded in signed credentials and second by using reputation based approach; where trust values are collected, aggregated and evaluated to disseminate reputation among the market players. There is a need for dynamic and flexible general-purpose trust management system. In this paper TUX-TMS: an extensible reputation based Trust Management System is presented for establishing and evaluating trust in grid systems.

2011

For a highly computational resource sharing grid environment, reliable transactions between entities is a major requirement. This is possible when not only do the users of the grid have an appropriate mechanism to select resource providers but the grid users must also pass through proper access control mechanisms placed by the resource providers Traditional Identity based access control methods are not applicable for grids because relationship between users and resource providers are ad hoc and dynamic, no central policy will be applicable. In this paper, users identify reputed resource providers by applying Fuzzy inference system on recommendation taken from its trustworthy acquaintances. The resource providers apply binary logistic regression on factors that influence the decision whether to allow a requesting user to use the grid or not.

The goal of Grid computing is to create illusion of a simple yet large and powerful self managing virtual computer out of a large collection of connected heterogeneous systems sharing various combinations of resources. Such an environment introduces challenging trust related issues as both service providers and users can come from mutually distrusted administrative domains and any of them can behave maliciously. The use of trust evaluation simplifies the security architecture and is evaluated on the basis of a number of parameters like trust decay, reputation, trust updation, transitivity etc. A number of models have been proposed by different researchers for the evaluation of trust but many of them have missed one or the another required parameters that are necessary for the evaluation of trust in a comprehensive way. In this paper a novel approach for evaluation of trust has been proposed that insists on the use of a number of imnportant parameters to calculate trust in a comprehensive way.

Grid computing allows sharing of services and resources distributed over geographically dispersed, heterogeneous, autonomous administrative domains. As a domain generally has no idea about the trustworthiness of other domains, it may hesitate in accessing shared services and resources provided by other domains. Accessing resources and services from untrusted domains may pose dangerous consequences to the source domain. Trust is an important parameter in achieving faithful domain to domain interaction. Domains must be able to determine the trustworthiness of each other for the access of a particular service. Domains must also provide trust based access to resources and services that they expose in the environment. This paper describes different facets associated with trust issues among different entities in a grid environment and proposes a trust model to establish and manage trust relationships. The trust model provides support to calculate direct as well as recommended trust. Based on this model, a trust based authorization framework is proposed that can be used to provide trust based access to grid services. The goal of the model is to encourage trust based domain to domain interaction and increase the confidence of domains in accessing shared resources provided by other domains. The framework has been implemented in .NET environment with the support of WSE 3.0 toolkit. The framework has been evaluated by implementing a scenario that involves enforcement of different trust policies. The time taken by the enforcement component to evaluate trust policies has been noted. The results obtained from the implementation imply that the approach is workable and can be used to provide trust based access to grid services.

Studies in Computational Intelligence, 2013

Cloud/Grid systems are composed of nodes that individually manage local resources, and when a client request is submitted to the system, it is necessary to find the most suitable nodes to satisfy that request. In a competitive scenario, each node is in competition with each other to obtain the assignment of available tasks. In such a situation, it is possible that a node, in order to obtain the assignment of a task, can lie when declaring its own capability. Therefore, lying nodes will need to require the collaboration of other nodes to complete the task and consequently the problem arises of finding the most promising collaborators. In such a context, to make effective this selection, each node should have a trust model for accurately choosing its interlocutors. In this paper, a trust-based approach is proposed to make a node capable of finding the most reliable interlocutors. This approach, in order to avoid the exploration of the whole node space, exploits a P2P resource finding approach for clouds/grids, capable of determining the admissible region of nodes to be considered for the search of the interlocutors.

International Journal of Computer Applications, 2013

Grid computing is a wide area distributed parallel computing environment where it focuses on communication among different heterogeneous devices and harnesses unused processor cycles of all computers in a network for solving critical problems too intensive for any stand-alone machine. In this scenario security is vital concern because of dynamic allocation of users and resources. Among all other security issues trust establishment is given first priority.In this paper, we propose a novel model for resource selection in Grid computing environment. This model is truly unique model where decision is based on computed total trust which includes transaction, feedbacks, reputation, similarity, activity, popularity and obviously the total trust of the resources. The final decision is depend on the total trust of each resource. So the main motto of our project is to retrieve the best resource among the resources in grid environment. This paper provides a model which will allow only dependable transactions in grid by using total trust as a measure for the resources.

Trust Modeling and …, 2010

Grid computing is a paradigm for distributed computation on shared resources. It uses a large-scale, highly decentralized infrastructure, in which a huge number of participants share heterogeneous resources for a given purpose.