1. Dimitri DeFigueiredo Earl Barr S. (Felix) Wu Adobe Systems Inc. UC Davis UC Davis International Conference on Privacy, Security, Risk and Trust 2009 1

2. Overview Motivation Conceptual Properties Formal Model Theorems Key Point 2 PASSAT 2009

3. Can I trust him? What is it? What is it used for? 3 PASSAT 2009

4. Trust Trust is useful. What is it? What is it used for? Ratings are not the same as trust. Why not? 4 PASSAT 2009

5. How do we use Trust? Trust helps us avoid risks that depend on others We dont take risks with people we do not trust We are vulnerable to the actions of people we trust Trust is under each persons complete control I trust you as much as I want 5 PASSAT 2009

6. Basic Properties Two-role rule Domain specific Complete ordering Higher is better 6 PASSAT 2009

7. Trust Values Definition: Trust values are real numbers. Think in dollar$ How much would you bet C will be on time for dinner? 7 PASSAT 2009

8. Reputation Graph From your experience, how much would you bet C is a good seller? 8 PASSAT 2009 $100 B A C D E $20 $50 $10 $60 $30 $10

9. World G 0 G 1 G k A World is a sequence of reputation graphs 9 PASSAT 2009 …

10. Reputation Function World Trust Graph f … 10 PASSAT 2009

11. Trust Graph 11 PASSAT 2009 50 10 AB CD 20

12. Trust Graph 12 PASSAT 2009 50 10 AB CD ? ? ? ? ? ? ? ? ? 20

13. Trust Threshold Trusted or Untrusted? h A =30 h C =9 13 PASSAT 2009 50 10 AB CD 20

14. How can we make Trust transitive? 14 PASSAT 2009 50 10 AB CD 20

15. Trust - Definition Trust is the personal threshold determined by the trusting party that describes the maximum utility the trusting party is willing to risk when dealing with the trusted party. 15 PASSAT 2009

16. For any world W For any permutation of vertices π World Trust Graph … Normalized Reputation Function 16 PASSAT 2009 f

17. Why normalize? 17 PASSAT 2009 trusted Why? A B C F E D N.Y.T. 20 2000

18. Why normalize? 18 PASSAT 2009 N.Y.T. trusted A B C F E D 20 2000

19. A DC B Types of Reputation Function Trivial 19 PASSAT 2009 AB C D A DC B

20. Types of Reputation Function Trivial Consensus-based 20 PASSAT 2009 A DC B AB C D 30 = 30

21. Types of Reputation Function Trivial Consensus-based Personalized 21 PASSAT 2009 A DC B AB C D 50 30 40

22. A Collusion 22 PASSAT 2009 50 10 AB CD 20

23. An Untrusted Collusion h A =30 23 PASSAT 2009 50 10 AB CD 20 10

24. W W A Manipulated World 24 PASSAT 2009 50 10 AB CD 20 10 A DC B ? AB CD ? ? W Manipulated W f f h A =30

25. Non-exploitability For any trust threshold h a vertex chooses, no untrusted collusion can fool it. 25 PASSAT 2009 A DC B ? AB CD ? ? Manipulated W f

26. Theorems Impossibility All non-exploitable consensus-based reputation functions are trivial Possibility There are non-trivial non-exploitable personalized reputation functions 26 PASSAT 2009

27. Impossibility Proof Sketch h A = 100 27 PASSAT 2009 50 10 A C=20D=10 20 10 B=50 What if h C = 30 ?!

28. Possibility Proof Sketch Constructive proof For a reputation threshold λ=0.5 Define: λ=0.5 28 PASSAT 2009 0.6 0.7 1 1 1 B A C

29. Possibility Proof Sketch Non-trivial λ=0.5 29 PASSAT 2009 0.6 0.7 1 1 1 0 B A C

30. Possibility Proof Sketch Non-exploitable For any trust threshold h set by any trusting party: untrusted node is not reachable unreachable node node cannot make other nodes reachable or unreachable 30 PASSAT 2009 1 1 1 B A C

31. Key Point Trust is a personal value. Rating systems should allow different people to have different points of view 31 PASSAT 2009

32. Questions? Thank you! Full version http://www.cs.ucdavis.edu/~defigued/ 32 PASSAT 2009