%0 Journal Article
%T The Analysis of Inference Attack in Automated Trust Negotiation
自动信任协商中的推理攻击分析
%A YANG Qiu-Wei
%A HONG Fan
%A ZHENG Ming-Hui
%A LIAO Jun-Guo
%A
杨秋伟
%A 洪帆
%A 郑明辉
%A 廖俊国
%J 计算机科学
%D 2007
%I
%X Automated trust negotiation is an approach to build trust relationship between strangers by disclosing attribute credentials alternately. The attributes owned by principles are always relevant each other, so disclosing some attributes maybe induce leakage of sensitive information, namely inference attack. We give the definition and partial order of sensitivity intensity of private attribute, then an abstract automated trust negotiation model is proposed, which depicts relevancy not only between principles and attributes, but also between policies and attributes. As a result, several inference attacks in automated trust negotiation are discussed, then defense scheme and security analysis are presented.
%K Credential
%K Automated trust negotiation
%K Inference attack
%K Authorization management
信任证
%K 自动信任协商
%K 推理攻击
%K 授权管理
%U http://www.alljournals.cn/get_abstract_url.aspx?pcid=5B3AB970F71A803DEACDC0559115BFCF0A068CD97DD29835&cid=8240383F08CE46C8B05036380D75B607&jid=64A12D73428C8B8DBFB978D04DFEB3C1&aid=1E8759907DE6547817196895208C7E32&yid=A732AF04DDA03BB3&vid=339D79302DF62549&iid=DF92D298D3FF1E6E&sid=228A710F49B6CE58&eid=9C65ADEB5990B252&journal_id=1002-137X&journal_name=计算机科学&referenced_num=0&reference_num=12