服务网格环境下基于行为的双层信任模型的研究

在开放的服务网格中,为不同管理域之间建立信任关系并以此实现它们之间的协同工作是当前服务网格所面临的一个主要安全问题。为了提高服务网格的安全性和可扩展性,文中提出了一个服务网格环境下基于行为的分层信任模型,用以解决处于不同管理域的实体之间协同工作的安全问题。模型上层建立和维护具有不同安全策略管理域之间的推荐信任关系,下层负责处理管理者对域内实体的信任评估问题。在利用推荐信任值建立管理域间关系的过程中,给出了一种根据实际交往经验调整管理域间推荐信任值的算法。同时,给出了一种可行的推荐信任值综合处理方法。实验表明,分层行为信任模型具有较好的有效性和可扩展性。

Study of two-layer trust model in service grid based on behavior

In open service grid, to establish trust relationships among different domains is a basic problem so as to cooperate between them. In this paper a two-layer trust model based on behavior was proposed to enhance grid security and extensibility. This trust model was used to resolve trust issues between entities in different domains. The upper layer established and maintained recommendation trust relationships between different domains in grid. Lower layer was in charge of how domain manager evaluated trust of entities in his domain. An algorithm was given to adjust trust relationships between domains based on entities interactions, and a practical method to process recommendation trust. At last, the experiment results show that two-layer trust model is effective and extensible.