An Approach for Evaluating Trust in IT Infrastructure

Trustworthiness of an IT infrastructure can be justified using the concept of trust case which denotes a complete and explicit structure encompassing all the evidence and argumentation supporting trust within a given context. A trust case is developed by making an explicit set of claims about the system of interest and showing how the claims are interrelated and supported by evidence. The approach uses Dempster-Shafer belief function framework to quantify the trust case. We demonstrate how recommendations issued by different stakeholders enable stakeholder-specific views of the trust case and reasoning about the level of trust in a given IT infrastructure