Active Trust Management for Autonomous Adaptive Survivable Systems.
Howard E. Shrobe, Jon Doyle · 2000
Contents 1 Innovative Claims 1 2 Technical Rationale 2 2.1 A Scenario . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2 2.2 Trust in Survivable Systems: An Overview . . . . . . . . . . . . . . . . . . . 4 2.2.1 Trust and rational decision making should supplant traditional notions of protection as the core concepts of Survivability . . . . . . . . . . . 4 2.2.2 How Active Trust Management can support Autonomous Adaptive Survivable Systems . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 2.2.3 Trust and Compromise Models provide explicit models of the Trustworthiness of computational resources and of the forms of of their Compromise . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7 2.2.4 Perpetual Analytic Monitoring keeps the Trust Model current by detecting events and Trend Patterns which are indicative of compromise 8 2.2.5 The Autonomous Adaptive Survivable System infrastructure uses Trust Models and models of