Trust Evaluation for Web Applications based on Behavioral Analysis

This paper deals with a joint use of a trust evaluation approach and access control mechanisms for improving security in Web-usage. Trust evaluation is achieved by means of both behavioral evaluation and credentials exchange, in such way that transitions among different access policies are automatically fired whenever a user behavior is validated. Behavioral analysis uses machine-learning techniques to gain knowledge about users navigation tracks, creating a user signature to be compared with a current behavior of the respective user. This mechanism is validated through experimental evaluation.

• Type: Conference
• Year: 2007
• Where: SEC
• Authors: Luiz Fernando Rust C. Carmo, Breno G. de Oliveira, Augusto C. Braga
• Keywords: Behavioral Evaluation, SEC 2007, Security Privacy, Trust Evaluation, Trust Evaluation Approach