Bridging the Trust Gap: Integrating Models of Behavior and Perception

In this paper, we propose a process-oriented trust framework that integrates an integrity-based trust model with the requirements and perceptions of those who manage and administer computing infrastructure. This integration enables a feedback loop between the system administrator and established models of trust that have been proposed to harden and secure systems. The proposed study will engage administrators in the design and use of mechanisms for establishing and evaluating the trust of cyberinfrastructure. The proposed study addresses a gap in current security research, which often views users as managers of a single computer, and not as an administrator of large computing environments. This work seeks to capture system administrators' perceptions of security and trust and incorporate real-world practices into the design of mechanisms for securing systems.