Jorge López

Behavior evaluation for trust management based on formal distributed network monitoring

Collaborative systems are growing in use and in popularity. The need to boost the methods concerning the interoperability is growing as well; therefore, trustworthy interactions of the different systems are a priority. The systems need to interact with users and other applications. The decision regarding with whom and how to interact with other users or applications depends on each application or system. In this paper, we focus on providing trust verdicts by evaluating the behaviors of different agents, making use of distributed network monitoring. This will provide trust management systems based on “soft trust” information regarding a trustee experience. We propose a formal distributed network monitoring approach to analyze the packets exchanged by the entities, in order to prove a system is acting in a trustworthy manner. Based on formal “trust properties”, we analyze the systems’ behaviors, then, we provide trust verdicts regarding those “trust properties”. Furthermore, automatized testing is performed using a suite of tools we have developed, and finally, our methodology is applied to a real industrial DNS use case scenario.

Testing trust properties using a formal distributed network monitoring approach

Collaborative systems are growing in use and in popularity. The need to boost the methods concerned by the interoperability is growing as well; making thus trustworthy interactions of the different systems a priority. The systems need to interact with users and with other applications in trusting each other. The decision regarding with who and how to interact with other users or applications depends on each application or system. In this paper, we focus on “soft trust”, that is trust management systems based on observations of the trustee behaviors to evaluate the trustee experience. Furthermore, we propose a formal distributed network monitoring approach to analyze the packets that the trustor and trustee exchange in order to prove the trustee is acting in a trustworthy manner. Based on formal “trust properties” defining the analyzed systems, the monitored systems behaviors on which these properties are checked provide, through testing verdicts, an evaluation of the trustor/trustee. Finally, our methodology is applied to a real industrial DNS use case scenario.

TEAR: A Multi-purpose Formal Language Specification for TEsting at Runtime

Collaborative systems are growing in use and in popularity. The need to boost the methods concerning the interoperability is growing as well, therefore, trustworthy interactions of the different systems are a priority. We have proposed a formal distributed network monitoring approach to analyze the packets exchanged by the entities, in order to prove a system is acting in a trustworthy manner. Using this approach, some limitations regarding the testers resources have been found. In this paper, we identify the constraints and propose and new language suited for testing at runtime in different environments.

Process Mining for Trust Monitoring

Communicating systems are today composed of a huge number of distributed processes interoperate with diverse kinds of applications, services and actors. It therefore becomes crucial to monitor and manage these trustworthy interactions. For that purpose, passive testing techniques have been used particularly for checking the system conformance w.r.t. Its standard. Among these studies, trust behaviors have been monitored in such systems. However, while several approaches have been designed, most of them monitor trust properties that have been manually designed or provided by common database. In this paper, we propose a novel approach to automatically generate trust properties from the study and analysis of the system through process mining techniques and by comparing with the formal specification of the system under test.

Online Testing: A Passive Approach for Protocols

Online testing approaches are becoming crucial in today’s complex systems. By that way, testing a protocol at run-time has to be performed during a normal use of the system without disturbing the process. The traces are observed and analyzed on-the-fly to provide test verdicts and no trace sets should be studied as a posteriori to the testing process. In this process, it is a challenging work to keep the same preciseness in conformance testing and the same efficiency in performance testing. In this paper, aiming to find a solution, we present a novel online passive testing approach based on Horn-Logic. In order to evaluate and assess our approach, we also developed a prototype and experimented it with a set of Session Initiation Protocol properties in a real IP Multimedia Subsystem environment. Finally, the preliminary results and discussions are provided.