论文标题
自主消息系统的自适应安全和信任管理
Adaptive Security and Trust Management for Autonomous Messaging Systems
论文作者
论文摘要
随着社会对信息通信系统的依赖，人们对可靠，可信赖，健壮和安全的适应性系统的需求变得越来越敏锐。现代自主性消息导向的中间件平台对自我修复，适应，发展，容忍度，安全性和主动漏洞评估有严格的要求，尤其是当系统的内部工作模型和对系统的环境影响在运行时不确定时。在本文中，我们提出了一种自适应和不断发展的安全方法，以及自主消息中间件系统的自适应信任管理方法。在面对不断变化的威胁时，这种方法学习，预期，发展并适应不断变化的环境。该方法结合了基于自适应风险的安全性，基于信任的安全性和基于安全性的信任：由此产生的超级添加协同作用改善并提高了安全性和对系统的信任程度。该方法还集成了不同的指标，评估工具和观察工具，以改善和提高系统可信度的评估性和可验证性。结果的验证是通过工业案例研究和最终用户评估。
With society's increased dependence on information communication systems, the need for dependable, trustable, robust, and secure adaptive systems becomes ever more acute. Modern autonomic message-oriented middleware platforms have stringent requirements for self-healing, adapting, evolving, fault-tolerance, security, and active vulnerability assessment, especially when the internal working model of a system and the environmental influences on the system are uncertain during run-time. In this paper, we present an adaptive and evolving security approach, and adaptive trust management approach to autonomous messaging middleware systems. This approach learns, anticipates, evolves, and adapts to a changing environment at run-time in the face of changing threats. The approach combines adaptive risk-based security, trust-based security, and security-based trust: the resultant supra-additive synergy improves and increases the strength of security and the degree of trust in the system. The approach also integrates different metrics, assessment tools, and observation tools that improve and increase the assessability and verifiability of the trustworthiness of the system. Validation of results is through industrial case studies and end-user assessment.
