Trust Management XIV

Tim Muller, Carmen Fernandez-Gago, Davide Ceolin, Ehud Gudes, Nurit Gal-Oz

► To cite this version:

Tim Muller, Carmen Fernandez-Gago, Davide Ceolin, Ehud Gudes, Nurit Gal-Oz. Trust Management XIV. Springer Nature Switzerland, AICT-694, 2024, IFIP Advances in Information and Communication Technology, 978-3-031-76713-5. 10.1007/978-3-031-76714-2. hal-04952098

HAL Id: hal-04952098

https://inria.hal.science/hal-04952098v1

Submitted on 17 Feb 2025

**HAL** is a multi-disciplinary open access
archive for the deposit and dissemination of sci-
entific research documents, whether they are pub-
lished or not. The documents may come from
teaching and research institutions in France or
abroad, or from public or private research centers.

L'archive ouverte pluridisciplinaire HAL, est
destinée au dépôt et à la diffusion de documents
scientifiques de niveau recherche, publiés ou non,
émanant des établissements d'enseignement et de
recherche français ou étrangers, des laboratoires
publics ou privés.

<figure><img src="image_1.png" /></figure>

Distributed under a Creative Commons Attribution 4.0 International License
Editor-in-Chief

Kai Rannenberg, Goethe University Frankfurt, Germany

Editorial Board Members

TC 1 – Foundations of Computer Science

Luís Soares Barbosa<sup>●</sup>, University of Minho, Braga, Portugal

TC 2 – Software: Theory and Practice

Jacques Carette, Department of Computer Science, McMaster University, Hamilton,
ON, Canada

TC 3 – Education

Arthur Tatnall<sup>●</sup>, Victoria University, Melbourne, Australia

TC 5 – Information Technology Applications

Erich J. Neuhold, University of Vienna, Austria

TC 6 – Communication Systems

Burkhard Stiller, University of Zurich, Zürich, Switzerland

TC 7 – System Modeling and Optimization

Lukasz Stettner, Institute of Mathematics, Polish Academy of Sciences, Warsaw, Poland

TC 8 – Information Systems

Jan Pries-Heje, Roskilde University, Denmark

TC 9 – ICT and Society

David Kreps<sup>●</sup>, National University of Ireland, Galway, Ireland

TC 10 – Computer Systems Technology

Achim Rettberg, Hamm-Lippstadt University of Applied Sciences, Hamm, Germany

TC 11 – Security and Privacy Protection in Information Processing Systems

Steven Furnell<sup>●</sup>, Plymouth University, UK

TC 12 – Artificial Intelligence

Eunika Mercier-Laurent<sup>●</sup>, University of Reims Champagne-Ardenne, Reims, France

TC 13 – Human-Computer Interaction

Marco Winckler<sup>●</sup>, University of Nice Sophia Antipolis, France

TC 14 – Entertainment Computing

Rainer Malaka, University of Bremen, Germany
IFIP Advances in Information and Communication Technology

The IFIP AICT series publishes state-of-the-art results in the sciences and technologies of information and communication. The scope of the series includes: foundations of computer science; software theory and practice; education; computer applications in technology; communication systems; systems modeling and optimization; information systems; ICT and society; computer systems technology; security and protection in information processing systems; artificial intelligence; and human-computer interaction.

Edited volumes and proceedings of refereed international conferences in computer science and interdisciplinary fields are featured. These results often precede journal publication and represent the most current research.

The principal aim of the IFIP AICT series is to encourage education and the dissemination and exchange of information about all aspects of computing.

More information about this series at https://link.springer.com/bookseries/6102
Tim Muller · Carmen Fernandez-Gago · Davide Ceolin · Ehud Gudes · Nurit Gal-Oz
Editors

Trust
Management XIV

14th IFIP WG 11.11 International Conference on
Trust Management, IFIPTM 2023
Amsterdam, The Netherlands, October 18–20, 2023
Proceedings

<figure><img src="image_2.png" /></figure>

Springer
Editors

Tim Muller
University of Nottingham
Nottingham, UK

Davide Ceolin
Centrum Wiskunde and Informatica
Amsterdam, The Netherlands

Nurit Gal-Oz
Sapir Academic College
Sderot, Israel

Carmen Fernandez-Gago
University of Malaga
Málaga, Spain

Ehud Gudes
Ben-Gurion University of the Negev
Be'er-Sheva, Israel

ISSN 1868-4238
ISSN 1868-422X (electronic)
IFIP Advances in Information and Communication Technology
ISBN 978-3-031-76713-5
ISBN 978-3-031-76714-2 (eBook)

https://doi.org/10.1007/978-3-031-76714-2

© IFIP International Federation for Information Processing 2024

This work is subject to copyright. All rights are solely and exclusively licensed by the Publisher, whether the whole or part of the material is concerned, specifically the rights of translation, reprinting, reuse of illustrations, recitation, broadcasting, reproduction on microfilms or in any other physical way, and transmission or information storage and retrieval, electronic adaptation, computer software, or by similar or dissimilar methodology now known or hereafter developed.

The use of general descriptive names, registered names, trademarks, service marks, etc. in this publication does not imply, even in the absence of a specific statement, that such names are exempt from the relevant protective laws and regulations and therefore free for general use.

The publisher, the authors and the editors are safe to assume that the advice and information in this book are believed to be true and accurate at the date of publication. Neither the publisher nor the authors or the editors give a warranty, expressed or implied, with respect to the material contained herein or for any errors or omissions that may have been made. The publisher remains neutral with regard to jurisdictional claims in published maps and institutional affiliations.

This Springer imprint is published by the registered company Springer Nature Switzerland AG
The registered company address is: Gewerbestrasse 11, 6330 Cham, Switzerland

If disposing of this product, please recycle the paper.
# Preface

The 14th edition of IFIPTM, the IFIP WG 11.11 International Conference on Trust Management (IFIPTM 2023) was held at the Center for Mathematics and Computer Science (CWI), Netherlands, from 19 to 20 October 2023. The mission of the IFIPTM 2023 conference was to share research solutions to problems of trust and trust management, including related security and privacy issues, and to identify new issues and directions for future research and development work.

IFIPTM 2023 invited submissions in the form of full, short, and position papers, presenting novel research on all topics related to trust, security, and privacy, especially:

- Trust in Information Technology and Security

- Trust and Identity Management

- Socio-Technical and Sociological Trust

- Emerging Technology for Trust

Different from the previous editions, IFIPTM 2023 also welcomed position papers that presented work containing opinions and ideas based on experience in the field that are useful to share with a wider community. IFIPTM 2023 was the first conference in the series since IFIPTM 2020 was cancelled due to COVID. Two papers were accepted for IFIPTM 2020, and the authors were given the choice to publish elsewhere or to wait until the next edition (i.e. IFIPTM 2023). One of the two papers from 2020 was chosen to be published now: "Continuous Authorization Architecture for Dynamic Trust Evaluation". We present the figures for both rounds of submissions together.

There were 22 submissions over two rounds of submissions. On average, each submission was reviewed by three Program Committee (PC) members. There were a total of 35 PC members, reviewing on average two papers each. We accepted seven full papers, two short papers, and two position papers. The acceptance rate for full papers was 31%. The selected papers represent the broad topical areas of the call for papers.

The program of IFIPTM 2023 included four presentation sessions, a panel discussion, an IFIP Working Group 11.11 meeting, and two keynote speakers: Stephen March from the Ontario Institute of Technology, and Yuecel Karabulut, Principal Solutions Architect at AWS. The keynote by Steve also received the William Winsborough Commemorative Address and Award, which aims to publicly recognise an individual who has significantly contributed to the development of computational trust or trust management, especially achievements with an international perspective.

Our thanks to everyone who contributed to the organization of IFIPTM 2023. We are grateful to our general chairs: Davide Ceolin (CWI, Netherlands), Ehud Gudes, (Ben-Gurion University of the Negev, Israel), and Nurit Gal-Oz (Sapir Academic College, Israel) for their great support in organizing the conference. We also thank all
the PC members for their efforts in selecting the papers and all the external reviewers
for assisting in the reviewing process. Thanks to IFIP WG 11.11 for continuing sup-
port. Last but not least, we are grateful to all authors who contributed to our conference.

October 2023

Tim Muller
Carmen Fernandez-Gago
## Organization

### General Chairs

Davide Ceolin

CWI, Amsterdam, The Netherlands

Ehud Gudes

Ben-Gurion University of the Negev, Israel

Nurit Gal-Oz

Sapir Academic College, Israel

### Program Committee Chairs

Tim Muller

University of Nottingham, UK

Carmen Fernandez-Gago

University of Málaga, Spain

### Steering Committee

Michael Agarwal

KU Leuven, Belgium

John Banerjee

McMaster University, Canada

Antonio Chan

Harvard University, USA

### Program Committee

Anirban Basu

Hitachi R&D, Japan

Davide Ceolin

University of Minho, Portugal

Piotr Cofta

Nagoya University, Japan

Nishant Doshi

Pandit Deendayal Energy University, India

Natasha Dwyer

Victoria University, Australia

Rino Falcone

Institute for Cognitive Sciences and Technologies, Italy

Davide Ferraris

University of Málaga, Spain

Tyrone Grandison

Proficiency Labs, UK

Ehud Gudes

Ben-Gurion University of the Negev, Israel

Dieter Gollmann

Hamburg University of Technology, Germany

Peter Herrmann

Norwegian University of Science and Technology, Norway

Christian Damsgaard Jensen

Technical University of Denmark, Denmark

Audun Jøsang

University of Oslo, Norway

Gabriele Lenzini

University of Luxembourg, Luxembourg

Peter Lewis

Aston University, UK

Wenjuan Li

City University of Hong Kong, China

Steve Marsh

University of Ontario Institute of Technology, Canada

Chris Mitchell

Royal Holloway, University of London, UK

Yuko Murayama

Tsuda College, Japan

Masakatsu Nishigaki

Shizuoka University, Japan

Dhiren Patel

National Institute of Technology Surat, India
<table><tr><td>Tanja Pavleska</td><td>Jožef Stefan Institute, Slovenia</td></tr><tr><td>Günther Pernul</td><td>Universität Regensburg, Germany</td></tr><tr><td>Marc Sel</td><td>KU Leuven, Belgium</td></tr><tr><td>Yannis Stamatiou</td><td>University of Patras, Greece</td></tr><tr><td>Chunhua Su</td><td>University of Aizu, Japan</td></tr><tr><td>Yuji Suga</td><td>Internet Initiative Japan, Japan</td></tr><tr><td>Dongxia Wang</td><td>Zhejiang University, China</td></tr><tr><td>Zhe Xia</td><td>Wuhan University of Technology, China</td></tr><tr><td>Shouhuai Xu</td><td>University of Texas at San Antonio, USA</td></tr></table>
# Contents

<table><tr><td>Continuous Authorization Architecture for Dynamic Trust Evaluation<br/>Hussein Joumaa, Ana Petrovska, Ali Hariri, Theo Dimitrakos,<br/>and Bruno Crispo</td><td>1</td></tr><tr><td>Behavior-Dependent Access Control Policies<br/>Amour Shmuel and Ehud Gudes</td><td>19</td></tr><tr><td>Trust Level Evaluation Engine for Dynamic Trust Assessment<br/>with Reference to Subjective Logic<br/>Ana Petrovska, Gabriele Gelardi, Hüseyin Demirci, Emre Koçyiğit,<br/>Gabriele Lenzini, Artur Hermann, Nataša Trkulja, Frank Kargl,<br/>Ioannis Krontiris, and Theo Dimitrakos</td><td>37</td></tr><tr><td>A User Study of an ABAC Model for Online Social Networks<br/>Adi Swissa and Ehud Gudes</td><td>56</td></tr><tr><td>A Pre-signature Scheme for Trustworthy Offline V2V Communication<br/>Dimah Almani, Tim Muller, Steven Furnell, Xavier Carpent,<br/>and Takahito Yoshizawa</td><td>72</td></tr><tr><td>Categorizing Review Helpfulness Using Abstract Dialectical Frameworks<br/>Atefeh Keshavarzi Zafarghandi and Davide Ceolin</td><td>89</td></tr><tr><td>Software and its Perceived Trustworthiness<br/>Anirban Basu and Satoshi Kai</td><td>105</td></tr><tr><td>Why Zero Trust Architectures Are Not Replacing Trust<br/>Christian Damsgaard Jensen</td><td>121</td></tr><tr><td>Evaluation of Entity Trustworthiness Based on Public and Private Data<br/>Marc Sel, Hasin Ishraq Reefat, Naghmeh Karimi,<br/>and Konstantinos Mersinas</td><td>136</td></tr><tr><td>A Difficulty in Trust Modelling<br/>Tim Muller</td><td>146</td></tr><tr><td>Author Index</td><td>155</td></tr></table>