基于双滑动窗口的用户行为信任评估机制  

Evaluation mechanism for user behavior trust based on DSW

作　　者：田立勤[1,2] 林闯[1] 

机构地区：[1]清华大学计算机科学与技术系,北京100084 [2]华北科技学院计算机系,北京101601

出　　处：《清华大学学报（自然科学版）》2010年第5期763-767,共5页Journal of Tsinghua University(Science and Technology)

基　　金：国家"九七三"重点基础研究项目(2010CB328105);国家自然科学基金资助项目(60872055;60673187;60803123);中国博士后科学基金资助项目(20090460320);河北省自然科学基金资助项目(F2010001745)

摘　　要：仅仅提供用户身份认证的安全控制已不能完全适应云计算等新型计算机网络应用,必须结合提供动态的行为可信的安全措施。该文借鉴社会信任的特性和计算机对信任评估的要求,提出较全面的评价用户行为信任的基本原则。然后给出一种基于行为证据的双滑动窗口的行为信任的量化评估机制。通过对滑动窗口的初始化,通过窗口的大小、窗口滑动的条件、过期信任和不信任记录在窗口位置的确定以及窗口内容的更新与替换来保证用户行为信任评估的可信性和可扩展性。最后根据信任的评估标准,用数据和理论分析证明了评估机制的可信性和可扩展性。与已有的主要信任评估算法相比较,该评估方法粒度细,信任评估对象不是服务提供者而是终端用户。Security measures for dynamic behavior trust should be combined with authentication security control to further strengthen the network service security.This paper presents basic criteria of evaluating user behavior trust based on double characteristics of social trust and computer evaluation requirements of the trust,with an evaluation mechanism for user behavior trust then developed based on double sliding windows（DSW）.The trustworthiness and scalability of the user behavior evaluation were obtained by initializing the sliding window and setting the window size,the sliding conditions,the distrust and expired record locations,and the updating and replacing window contents.The trustworthiness and scalability were analyzed by using the user behavior evaluation criteria and by being compared with the conventional methods.The results show that the algorithm uses a fine grain size evaluation mechanism with the trust evaluated object not being the service providers but the end-user.

关 键 词：用户行为信任 行为信任评估 信任评估原则 双滑动窗口 可信度与可扩展性 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]