A novel trust management framework for multi-cloud environments based on trust service providers

In this paper, we address the problem of trust management in multi-cloud environments based on a set of distributed Trust Service Providers (TSPs). These are independent third-party providers/trust agents, trusted by Cloud Providers (CPs), Cloud Service Providers (CSPs) and Cloud Service Users (CSUs), that provide trust related services to cloud participants. TSPs are distributed over the clouds, and they elicit raw trust evidence from different sources and in different formats. This evidence is information regarding the adherence of a CSP to a Service Level Agreement (SLA) for a cloud-based service and the feedback sent by CSUs. Using this information, they evaluate an objective trust and a subjective trust of CSPs. TSPs communicate among themselves through a trust propagation network that permits a TSP to obtain trust information about a CSP from other TSPs. Experiments show that our proposed framework is effective and relatively stable in differentiating trustworthy and untrustworthy CSPs in a multi-cloud environment.

[1]  Tao Yu,et al.  A reputation and trust management broker framework for Web applications , 2005, 2005 IEEE International Conference on e-Technology, e-Commerce and e-Service.

[2]  Rajkumar Buyya,et al.  Inter‐Cloud architectures and application brokering: taxonomy and survey , 2014, Softw. Pract. Exp..

[3]  Gang Chen,et al.  Heuristic Discovery of Role-Based Trust Chains in Peer-to-Peer Networks , 2009, IEEE Transactions on Parallel and Distributed Systems.

[4]  Julita Vassileva,et al.  Bayesian network-based trust model , 2003, Proceedings IEEE/WIC International Conference on Web Intelligence (WI 2003).

[5]  Jane Yung-jen Hsu,et al.  Parameter learning of personalized trust models in broker-based distributed trust management , 2006, Inf. Syst. Frontiers.

[6]  Erich Schikuta,et al.  SLA Validation in Layered Cloud Infrastructures , 2010, GECON.

[7]  Joshua Fogel,et al.  Internet social network communities: Risk taking, trust, and privacy concerns , 2009, Comput. Hum. Behav..

[8]  Audun Jøsang,et al.  Exploring Different Types of Trust Propagation , 2006, iTrust.

[9]  Shanshan Song,et al.  Fuzzy Trust Integration for Security Enforcement in Grid Computing , 2004, NPC.

[10]  Wei Zhang,et al.  Subjectivity and Objectivity of Trust , 2012, ADMI.

[11]  Cees T. A. M. de Laat,et al.  Toward a Dynamic Trust Establishment approach for multi-provider Intercloud environment , 2012, 4th IEEE International Conference on Cloud Computing Technology and Science Proceedings.

[12]  S. Buchegger,et al.  A Robust Reputation System for P2P and Mobile Ad-hoc Networks , 2004 .

[13]  Akash K Singh.  Trust and Trust Management Models for Ecommerce & Sensor Network , 2012 .

[14]  S. K. Sinha,et al.  A New Trust Management Architecture for Cloud Computing Environment , 2012, 2012 International Symposium on Cloud and Services Computing.

[15]  Muthucumaru Maheswaran,et al.  A trust brokering system and its application to resource management in public-resource grids , 2004, 18th International Parallel and Distributed Processing Symposium, 2004. Proceedings..

[16]  Kwei-Jay Lin,et al.  Context-Aware Distributed Reputation Management System , 2008, 2008 IEEE International Conference on e-Business Engineering.

[17]  Mohammad Monsef,et al.  Trust and privacy concern in the Cloud , 2011 .

[18]  Rajkumar Buyya,et al.  InterCloud: Utility-Oriented Federation of Cloud Computing Environments for Scaling of Application Services , 2010, ICA3PP.

[19]  C. Sierra,et al.  REGRET: A reputation model for gregarious societies , 2001 .

[20]  Siani Pearson,et al.  Privacy, Security and Trust Issues Arising from Cloud Computing , 2010, 2010 IEEE Second International Conference on Cloud Computing Technology and Science.

[21]  Alok Aggarwal,et al.  QoS based trust management model for Cloud IaaS , 2012, 2012 2nd IEEE International Conference on Parallel, Distributed and Grid Computing.

[22]  Khaled M. Khan,et al.  Establishing Trust in Cloud Computing , 2010, IT Professional.

[23]  Young-Koo Lee,et al.  A trust model for ubiquitous systems based on vectors of trust values , 2005, Seventh IEEE International Symposium on Multimedia (ISM'05).

[24]  Audun Jøsang,et al.  Trust network analysis with subjective logic , 2006, ACSC.

[25]  Munindar P. Singh,et al.  Detecting deception in reputation management , 2003, AAMAS '03.

[26]  Randy H. Katz,et al.  A view of cloud computing , 2010, CACM.

[27]  Ramanathan V. Guha,et al.  Propagation of trust and distrust , 2004, WWW '04.

[28]  David Bernstein,et al.  Intercloud Security Considerations , 2010, 2010 IEEE Second International Conference on Cloud Computing Technology and Science.

[29]  Paolo Avesani,et al.  Trust-aware recommender systems , 2007, RecSys '07.

[30]  P. Varalakshmi,et al.  QoS Monitoring and Dynamic Trust Establishment in the Cloud , 2012, GPC.

[31]  Tharam S. Dillon,et al.  SLA-Based Trust Model for Cloud Computing , 2010, 2010 13th International Conference on Network-Based Information Systems.

[32]  Georg Lausen,et al.  Spreading activation models for trust propagation , 2004, IEEE International Conference on e-Technology, e-Commerce and e-Service, 2004. EEE '04. 2004.

[33]  G. Pulla,et al.  A SURVEY ON TRUST MANAGEMENT FOR MOBILE AD HOC NETWORKS , 2010 .

[34]  Max Mühlhäuser,et al.  Towards a Trust Management System for Cloud Computing , 2011, 2011IEEE 10th International Conference on Trust, Security and Privacy in Computing and Communications.

[35]  Munindar P. Singh,et al.  Operators for propagating trust and their evaluation in social networks , 2009, AAMAS.

[36]  Mark S. Fox,et al.  An ontology of trust: formal semantics and transitivity , 2006, ICEC '06.

[37]  Liu Xiao-ming,et al.  A Trust Evaluation Mechanism Based on Certified Trust and Fuzzy-Derived Reputation , 2012, 2012 Fourth International Conference on Multimedia Information Networking and Security.

[38]  Salvatore Venticinque,et al.  A Cloud Agency for SLA Negotiation and Management , 2010, Euro-Par Workshops.

[39]  P. Varalakshmi,et al.  A Multi-Broker Trust Management Framework for Resource Selection in Grid , 2007, 2007 2nd International Conference on Communication Systems Software and Middleware.

[40]  Mark Witkowski,et al.  Objective trust-based agents: Trust and trustworthiness in a multi-agent trading society , 2000, Proceedings Fourth International Conference on MultiAgent Systems.

[41]  Peng Liu,et al.  An Objective Trust Management Framework for Mobile Ad Hoc Networks , 2007, 2007 IEEE 65th Vehicular Technology Conference - VTC2007-Spring.

[42]  Mukesh Singhal,et al.  Collaboration in multicloud computing environments: Framework and security issues , 2013, Computer.

[43]  Thomas Beth,et al.  Valuation of Trust in Open Networks , 1994, ESORICS.

[44]  Junqi Zhang,et al.  Dynamic trust evaluation and scheduling framework for cloud computing , 2012, Secur. Commun. Networks.

[45]  Raymond Klefstad,et al.  DIRECT: A Robust Distributed Broker Framework for Trust and Reputation Management , 2006, The 8th IEEE International Conference on E-Commerce Technology and The 3rd IEEE International Conference on Enterprise Computing, E-Commerce, and E-Services (CEC/EEE'06).

[46]  Junping Du,et al.  Adaptive and attribute-based trust model for service level agreement guarantee in cloud computing , 2013, IET Inf. Secur..

[47]  Nicholas R. Jennings,et al.  An efficient and versatile approach to trust and reputation using hierarchical Bayesian modelling , 2012, Artif. Intell..

[48]  Jianping Hu,et al.  A novel cloud-based trust model for pervasive computing , 2004, The Fourth International Conference onComputer and Information Technology, 2004. CIT '04..

[49]  Sung Jin Hur,et al.  Improved trust-aware recommender system using small-worldness of trust networks , 2010, Knowl. Based Syst..

[50]  Qing Zhang,et al.  A Classification Scheme for Trust Functions in Reputation-Based Trust Management , 2004, Trust@ISWC.

[51]  Andrew P. Martin,et al.  Trust in the Cloud , 2011, Inf. Secur. Tech. Rep..

[52]  Ruidong Li,et al.  Future trust management framework for mobile ad hoc networks , 2008, IEEE Communications Magazine.

[53]  Zhu Han,et al.  A trust evaluation framework in distributed networks: Vulnerability analysis and defense against attacks , 2006, Proceedings IEEE INFOCOM 2006. 25TH IEEE International Conference on Computer Communications.

[54]  Sakai Hiroshi,et al.  Use cases and functional requirements for inter-cloud computing , 2010 .

[55]  Max Mühlhäuser,et al.  Cloud Computing Landscape and Research Challenges Regarding Trust and Reputation , 2010, 2010 7th International Conference on Ubiquitous Intelligence & Computing and 7th International Conference on Autonomic & Trusted Computing.

[56]  Bu-Sung Lee,et al.  TrustCloud: A Framework for Accountability and Trust in Cloud Computing , 2011, 2011 IEEE World Congress on Services.

[57]  Jemal H. Abawajy,et al.  Establishing Trust in Hybrid Cloud Computing Environments , 2011, 2011IEEE 10th International Conference on Trust, Security and Privacy in Computing and Communications.

[58]  Shanlin Yang,et al.  A novel two-stage model for cloud service trustworthiness evaluation , 2014, Expert Syst. J. Knowl. Eng..

[59]  Krishnendu Roy,et al.  An SLA-based Framework for Estimating Trustworthiness of a Cloud , 2012, 2012 IEEE 11th International Conference on Trust, Security and Privacy in Computing and Communications.

[60]  Audun Jøsang,et al.  A Logic for Uncertain Probabilities , 2001, Int. J. Uncertain. Fuzziness Knowl. Based Syst..

[61]  Austen Rainer,et al.  Trust in software outsourcing relationships: An empirical investigation of Indian software companies , 2006, Inf. Softw. Technol..

[62]  Lakshmi Sobhana Kalli,et al.  Market-Oriented Cloud Computing : Vision , Hype , and Reality for Delivering IT Services as Computing , 2013 .

[63]  Vladimiro Sassone,et al.  A Bayesian Model for Event-based Trust , 2022 .

[64]  Jemal H. Abawajy,et al.  Determining Service Trustworthiness in Intercloud Computing Environments , 2009, 2009 10th International Symposium on Pervasive Systems, Algorithms, and Networks.

[65]  Martine De Cock,et al.  A Many Valued Representation and Propagation of Trust and Distrust , 2005, WILF.