Comparing TCD / SNet with two other formal analysis approaches based on i * : Formal Tropos and Secure Tropos

In previous work, we proposed the prototype environment SNet based on the Trust-Confidence-Distrust (TCD) approach for the representation and dynamic evaluation of agent-based designs for interorganizational networks. There are two major ingredients: i* for modeling the domain statically and ConGolog for analysing it dynamically via simulations. In the context of i*, several other approaches that try to enrich i* models to allow for more formal analyses exist. In this paper, we compare our approach with two of them, Formal Tropos and Secure Tropos. While the intended use of these is quite different from SNet, there are a number of commonalities, which will be highlighted in this paper as well as the differences, including complementary forms of analysis such as model checking versus simulation.