R2M: A Reputation Model for Mashups

The Web 2.0 has changed the Internet landscape, users are no longer only consumers but now also producers of content. The increasing number of personal data published on Web Service Providers fathered a new kind of applications: the mashups. These third-party applications access users´ information through service providers´ APIs via secure authorization protocols such as OAuth. But these protocols rely on the users who must blindly grant access to each mashup, with no idea beforehand about its trustworthiness. We propose a Reputation Model for Mashups to address this issue. The R2M solution monitors mashups´ calls on the Web Service Providers´ APIs, detects suspicious activities, and finally reports to the user to collect his feedback in order to collaboratively build the mashup´s reputation. We describe an implementation of R2M on the Bell Labs´ service Dundal.com to prove its feasibility in a real use case. From this experimentation, we plan to collect user experience to improve the R2M key mechanisms and refine the reputation computation.