May 6, 1996 to May 8, 1996
Joan Feigenbaum , AT&T Research
Matt Blaze , AT&T Research
We identify the trust management problem as a distinct and important component of security in network services. Aspects of the trust management problem include formulating security policies and security credentials, determining whether particular sets of credentials satisfy the relevant policies, and deferring trust to third parties. Existing systems that support security in networked applications, including X.509 and PGP, address only narrow subsets of the overall trust management problem and often do so in a manner that is appropriate to only one application. This paper presents a comprehensive approach to trust management, based on a simple language for specifying trusted actions and trust relationships. It also describes a prototype implementation of a new trust management system, called PolicyMaker, that will facilitate the development of security features in a wide range of network services.
Joan Feigenbaum, Matt Blaze, "Decentralized Trust Management", SP, 1996, 2012 IEEE Symposium on Security and Privacy, 2012 IEEE Symposium on Security and Privacy 1996, pp. 0164, doi:10.1109/SECPRI.1996.502679