anirban · basu - trustworthiness

SCATMAN: A Framework for Enhancing Trustworthiness in Digital Supply Chains

2023-11-01T00:00:00+00:00

Michael Eckel, Anirban Basu, Satoshi Kai, Hevais Simo Fhom, Sinisa Dukanovic, Henk Birkholz, Shingo Hane and Matthias Lieske

Abstract: In this paper, we present a framework and an architecture that aim to enable and manage trust in supply chains. Our architecture addresses the authenticity and integrity of devices and processes within heterogeneous system landscapes. We identify and discuss the current challenges in digital supply chains and lay out security, privacy, and interoperability requirements that must be met for successful implementation. We hypothesize that the overall perception of trust in a supply chain depends on the trustworthiness of all digital systems involved, including hardware, software, and information flow. Our proposed architecture helps enhance trustworthiness based on verifiable, indisputable, and believable digital evidence for devices and processes in supply chains, including the entire hardware and software lifecycles. We actively advocate for a mixed landscape of centralized and decentralized solutions for the storage of evidence and trust information. This can include traditional centralized databases and distributed ledger technologies. We discuss the auditability and accountability of digital evidence using trust-enabling technologies, and present a preliminary proof-of-concept (PoC) implementation in a real-world application scenario.

address	Exeter, UK
booktitle	Proceedings of the IEEE 22nd International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom)
doi	10.1109/TrustCom60117.2023.00110
keywords	privacy, distributed-ledger, digital-systems, supply-chains, distributed-databases, computer-architecture, software, trustworthiness, integrity, transparency, trusted-computing, confidential-computing, society-5-0, industrie-4-0, digital-twin, supply-chain-security, distributed-system-security, smart-factory, blockchain-technology
month	11
pages	750-761

Cite this publication, using BibTeX

@inproceedings{eckel2023scatman,
  abstract = {In this paper, we present a framework and an architecture that aim to enable and manage trust in supply chains. Our architecture addresses the authenticity and integrity of devices and processes within heterogeneous system landscapes. We identify and discuss the current challenges in digital supply chains and lay out security, privacy, and interoperability requirements that must be met for successful implementation. We hypothesize that the overall perception of trust in a supply chain depends on the trustworthiness of all digital systems involved, including hardware, software, and information flow. Our proposed architecture helps enhance trustworthiness based on verifiable, indisputable, and believable digital evidence for devices and processes in supply chains, including the entire hardware and software lifecycles. We actively advocate for a mixed landscape of centralized and decentralized solutions for the storage of evidence and trust information. This can include traditional centralized databases and distributed ledger technologies. We discuss the auditability and accountability of digital evidence using trust-enabling technologies, and present a preliminary proof-of-concept (PoC) implementation in a real-world application scenario.},
  address = {Exeter, UK},
  author = {Eckel, Michael and Basu, Anirban and Kai, Satoshi and Simo Fhom, Hevais and Dukanovic, Sinisa and Birkholz, Henk and Hane, Shingo and Lieske, Matthias },
  booktitle = {Proceedings of the IEEE 22nd International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom)},
  doi = {10.1109/TrustCom60117.2023.00110},
  keywords = {Privacy;Distributed ledger;Digital systems;Supply chains;Distributed databases;Computer architecture;Software;trustworthiness;integrity;transparency;Trusted Computing;confidential computing;Society 5.0;Industrie 4.0;digital twin;supply chain security;distributed system security;smart factory;blockchain technology},
  month = {November},
  pages = {750-761},
  title = {SCATMAN: A Framework for Enhancing Trustworthiness in Digital Supply Chains},
  year = {2023},
}

Software and its perceived trustworthiness

2023-10-19T00:00:00+00:00

Anirban Basu and Satoshi Kai

Abstract: Trust is a pervasive and essential driver for sustainable interactions between social entities and the functioning of a society as a whole. Trust, from the decisional perspective, has been summarised as 'the act of choosing to put oneself into a situation of risk, where the outcomes are dependent on the actions of another' [18]. Trust is observed to be contextual, subjective, idiosyncratic and often only really understood from the perspective of an individual [8]. The term trust system, coined in [23], is 'where computational tools, humans and trust reasoning capabilities come together to accomplish something where trust is an enabling factor'. In software supply chains and value chains, adequate measures do not exit beyond attempts to enforce trust through cryptographic verification, in order to faciliate stakeholders to make trust deliberations about the entities in supply and value chains. In this position paper, we propose the blueprint of a framework for the assessment of perceived trustworthiness in software supply chains such that a trustor is empowered, as opposed to enforced, to make decisions based on their trust deliberations.

address	Amsterdam, Netherlands
booktitle	Proceedings of the IFIP WG 11.11 International Conference on Trust Management (IFIPTM)
day	19
doi	10.1007/978-3-031-76714-2_7
isbn	978-3-031-76714-2
keywords	trust, trustworthiness, perceived-trustworthiness, software-supply-chain, security
month	10
pages	105-120
publisher	Springer Nature, Switzerland

Cite this publication, using BibTeX

@inproceedings{basu2023perceivedtrustworthiness,
  abstract = {Trust is a pervasive and essential driver for sustainable interactions between social entities and the functioning of a society as a whole. Trust, from the decisional perspective, has been summarised as 'the act of choosing to put oneself into a situation of risk, where the outcomes are dependent on the actions of another' [18]. Trust is observed to be contextual, subjective, idiosyncratic and often only really understood from the perspective of an individual [8]. The term trust system, coined in [23], is 'where computational tools, humans and trust reasoning capabilities come together to accomplish something where trust is an enabling factor'. In software supply chains and value chains, adequate measures do not exit beyond attempts to enforce trust through cryptographic verification, in order to faciliate stakeholders to make trust deliberations about the entities in supply and value chains. In this position paper, we propose the blueprint of a framework for the assessment of perceived trustworthiness in software supply chains such that a trustor is empowered, as opposed to enforced, to make decisions based on their trust deliberations.},
  address = {Amsterdam, Netherlands},
  author = {Basu, Anirban and Kai, Satoshi},
  booktitle = {Proceedings of the IFIP WG 11.11 International Conference on Trust Management (IFIPTM)},
  day = {19},
  doi = {10.1007/978-3-031-76714-2_7},
  isbn = {978-3-031-76714-2},
  keywords = {trust;trustworthiness;perceived trustworthiness;software supply chain;security},
  month = {October},
  pages = {105-120},
  publisher = {Springer Nature, Switzerland},
  title = {Software and its perceived trustworthiness},
  year = {2023},
}

Thinking about Trust: People, Process, and Place

2020-06-12T00:00:00+00:00

Stephen Marsh, Tosan Atele-Williams, Anirban Basu, Natasha Dwyer, Peter R. Lewis, Hector Miller-Bakewell and Jeremy Pitt

Abstract: This brief paper is about trust. It explores the phenomenon from various angles, with the implicit assumptions that trust can be measured in some ways, that trust can be compared and rated, and that trust is of worth when we consider entities from data, through artificial intelligences, to humans, with side trips along the way to animals. It explores trust systems and trust empowerment as opposed to trust enforcement, the creation of trust models, applications of trust, and the reasons why trust is of worth.

day	12
doi	10.1016/j.patter.2020.100039
issue	3
journal	Elsevier Cell Patterns
keywords	trust, trustworthiness, data, people, trust-empowerment, artificial-intelligence
month	06
publisher	Elsevier
volume	1

Cite this publication, using BibTeX

@article{marsh2020thinking,
  abstract = {This brief paper is about trust. It explores the phenomenon from various angles, with the implicit assumptions that trust can be measured in some ways, that trust can be compared and rated, and that trust is of worth when we consider entities from data, through artificial intelligences, to humans, with side trips along the way to animals. It explores trust systems and trust empowerment as opposed to trust enforcement, the creation of trust models, applications of trust, and the reasons why trust is of worth.},
  author = {Marsh, Stephen and Atele-Williams, Tosan and Basu, Anirban and Dwyer, Natasha and Lewis, Peter R.\  and Miller-Bakewell, Hector and Pitt, Jeremy},
  day = {12},
  doi = {10.1016/j.patter.2020.100039},
  issue = {3},
  journal = {Elsevier Cell Patterns},
  keywords = {trust;trustworthiness;data;people;trust empowerment;artificial intelligence},
  month = {June},
  publisher = {Elsevier},
  title = {Thinking about Trust: People, Process, and Place},
  volume = {1},
  year = {2020},
}