TRUST (AND MISTRUST) IN SECURE APPLICATIONS Exploring and considering trust assumptions during every stage of software development. Trust and trustworthiness are (the so-called trust assumptions). If the the foundations of security. Hometrusted entities satisfy these properties, John Viega, owners trust lock manufacturers to then they are trustworthy. Unfortucreate quality locks to protect their nately, because these properties are selhomes. Some locks are trustworthy; Tadayoshi Kohno, dom explicitly defined, misguided trust others are not. Businesses trust securelationships in software applications rity guards to admit only authorized and Bruce Potter are not uncommon. personnel into sensitive areas. Some Software developers have trust relasecurity guards should be trusted; tionships during every stage of software some should not. CGI programmers trust users development. Before a software project is conto provide valid inputs to the data fields on ceived, there are business and personal trust Web pages. Although most users can be relationships that developers generally assume trusted, some cannot. The basis for these trust will not be abused. For example, many corporelationships and how they are formed can drarations trust that their employees will not matically affect the underlying security of any attack the information systems of the company. system be it
Communications of the ACM – Association for Computing Machinery
Published: Feb 1, 2001
It’s your single place to instantly
discover and read the research
that matters to you.
Enjoy affordable access to
over 18 million articles from more than
15,000 peer-reviewed journals.
All for just $49/month
Query the DeepDyve database, plus search all of PubMed and Google Scholar seamlessly
Save any article or search result from DeepDyve, PubMed, and Google Scholar... all in one place.
Get unlimited, online access to over 18 million full-text articles from more than 15,000 scientific journals.
Read from thousands of the leading scholarly journals from SpringerNature, Wiley-Blackwell, Oxford University Press and more.
All the latest content is available, no embargo periods.
“Hi guys, I cannot tell you how much I love this resource. Incredible. I really believe you've hit the nail on the head with this site in regards to solving the research-purchase issue.”Daniel C.
“Whoa! It’s like Spotify but for academic articles.”@Phil_Robichaud
“I must say, @deepdyve is a fabulous solution to the independent researcher's problem of #access to #information.”@deepthiw
“My last article couldn't be possible without the platform @deepdyve that makes journal papers cheaper.”@JoseServera