RT-based administrative models for community cyber security information sharing

We develop a series of formal administrative models for recently proposed informal requirements for community cyber security information sharing [9]. Traditional enterprise-oriented administrative models are not suitable for the highly dynamic and distributed nature of this multi-organization application domain. Hence, new administrative models with robust intuitive grounding and rigorous mathematical foundations are required. We show that the role-based trust management (RT) framework [5], [7] is suitable in large measure to address the informal scenarios of [9], with one essential extension to enable self-assignment of users to selected roles. Applications of extended forms of RT, as well as its limitations, are also considered.