title: Security policies and trust in ubiquitous computing.
abstract: Ubiquitous environments comprise resource-constrained mobile and wearable devices and computational elements embedded in everyday artefacts. These are connected to each other using both infrastructure-based as well as short-range ad hoc networks. Limited Internet connectivity limits the use of conventional security mechanisms such as public key infrastructures and other forms of server-centric authentication. Under these circumstances, peer-to-peer interactions are well suited for not just information interchange, but also managing security and privacy. However, practical solutions for protecting mobile devices, preserving privacy, evaluating trust and determining the reliability and accuracy of peer-provided data in such interactions are still in their infancy. Our research is directed towards providing stronger assurances of the reliability and trustworthiness of information and services, and the use of declarative policy-driven approaches to handle the open and dynamic nature of such systems. This paper provides an overview of some of the challenges and issues, and points out directions for progress.
authors.affiliation: Department of Computer Science and Electrical Engineering, University of Maryland-Baltimore County, 1000 Hilltop Circle, Baltimore, MD 21250, USA. joshi@cs.umbc.edu
authors.forename: Anupam
authors.initials: A
authors.lastname: Joshi
authors.forename: Tim
authors.initials: T
authors.lastname: Finin
authors.forename: Lalana
authors.initials: L
authors.lastname: Kagal
authors.forename: Jim
authors.initials: J
authors.lastname: Parker
authors.forename: Anand
authors.initials: A
authors.lastname: Patwardhan
mesh_terms: D016494:Computer Security / Q000639:trends*; D020407:Internet / Q000639:trends*; D018907:Privacy; D011640:Public Policy; D012984:Software; D035502:Trust; D014481:United States