Collaboration decision making based on AHP method in Tr-OrBAC model: Case study

In the collaborative systems, in order to establish successful and protected collaboration, the trust management is first established between the participating entities and the trust score of each entity is calculated. This score is obtained based on the three trust criteria (satisfaction, reputation and recommendation) that are redefined and reused in our model: Tr-OrBAC. The evaluation of these criteria permits to select and choose the appropriate type of access to be assigned to a requester entity in the collaborative system according to its reliability. Each access type will be presented by OrBAC security rules in which we add the trust score as a new variable. The main goal of this paper is to exploit the AHP (Analytic Hierarchy Process) method for multi-criteria analyses in order to evaluate the trust criteria and to select the correct access type for the collaborating entities. In order to illustrate the feasibility of using AHP in Tr-OrBAC for taking the collaboration decision, we apply this solution in the Electrical Grid as a Critical Infrastructure case study.

I. Introduction

During the last decades, the world has seen an IT revolution. Every second, thousands of data are shared, websites are visited and the information is disclosed. This diversity of activities in the IT world can produce serious results in terms of security; sensitive and personal data may be shared in the open systems and therefore may be reused in malicious activities. It is in this context that the security of data in particular, and the information systems in general, becomes paramount, especially, when we establish the collaborative systems [1] containing several organizations within Critical Infrastructure (CI) [2].