{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,6,6]],"date-time":"2025-06-06T20:27:32Z","timestamp":1749241652989,"version":"3.40.4"},"reference-count":27,"publisher":"IGI Global","issue":"1","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2014,1,1]]},"abstract":"<p>Developing a trustworthy information system is a challenging task. The overall trustworthiness of an information system depends on trust relationships that are generally assumed without adequate justification. However, lack of appropriate analysis of such relationships and of appropriate justification of relevant trust assumptions might lead to systems that fail to fully achieve their functionalities. Existing literature does not provide adequate guidelines for a systematic process or an appropriate modeling language to support such trust-focused analysis. This paper fills this gap by introducing a process that allows developers to capture possible trust relationships and to reason about them. The process is supported by a modeling language based on a set of concepts relating to trust and control and a CASE tool. An illustrative example from the UK health care domain is used to demonstrate the applicability and usefulness of the approach.<\/p>","DOI":"10.4018\/ijismd.2014010102","type":"journal-article","created":{"date-parts":[[2014,5,8]],"date-time":"2014-05-08T20:06:16Z","timestamp":1399579576000},"page":"25-48","source":"Crossref","is-referenced-by-count":11,"title":["Modeling Trust Relationships for Developing Trustworthy Information Systems"],"prefix":"10.4018","volume":"5","author":[{"given":"Michalis","family":"Pavlidis","sequence":"first","affiliation":[{"name":"University of East London, London, UK"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Shareeful","family":"Islam","sequence":"additional","affiliation":[{"name":"School of Architecture, Computing and Engineering, University of East London, London, UK"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Haralambos","family":"Mouratidis","sequence":"additional","affiliation":[{"name":"University of Brighton, Brighton, UK"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Paul","family":"Kearney","sequence":"additional","affiliation":[{"name":"Security Futures Practice, BT Innovate & Design, London, UK"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"2432","reference":[{"journal-title":"The evolution of cooperation","year":"1984","author":"R.Axelrod","key":"ijismd.2014010102-0"},{"key":"ijismd.2014010102-1","doi-asserted-by":"crossref","unstructured":"Bimrah, K. K. (2009). A framework for modelling trust during information systems development. PhD Thesis, University of East London, UK.","DOI":"10.1007\/b137171_62"},{"key":"ijismd.2014010102-2","doi-asserted-by":"publisher","DOI":"10.1023\/B:AGNT.0000018806.20944.ef"},{"key":"ijismd.2014010102-3","doi-asserted-by":"publisher","DOI":"10.1002\/9780470517857"},{"key":"ijismd.2014010102-4","doi-asserted-by":"crossref","first-page":"260","DOI":"10.4018\/978-1-61520-837-1.ch010","article-title":"Incorporating social trust into design practices for secure systems","author":"P.Cofta","year":"2011","journal-title":"Software engineering for secure systems: Industrial and research perspectives"},{"key":"ijismd.2014010102-5","doi-asserted-by":"publisher","DOI":"10.1057\/palgrave.ejis.3000517"},{"key":"ijismd.2014010102-6","doi-asserted-by":"publisher","DOI":"10.1007\/s10207-006-0005-7"},{"key":"ijismd.2014010102-7","doi-asserted-by":"publisher","DOI":"10.1007\/s00766-009-0093-9"},{"key":"ijismd.2014010102-8","doi-asserted-by":"crossref","unstructured":"Islam, S., & Houmb, S. H. (2010a). Integrating risk management activities into requirements engineering. In Proceeding of the 4th IEEE International Conference on Research Challenges in Information Science (RCIS2010), Nice, France.","DOI":"10.1109\/RCIS.2010.5507389"},{"issue":"3","key":"ijismd.2014010102-9","first-page":"369","article-title":"A framework to support alignment of secure software engineering with legal regulations. Journal of Software and Systems Modeling (SoSyM)","volume":"10","author":"S.Islam","year":"2011","journal-title":"Theme Section on Non-Functional System Properties in Domain-Specific Modeling Languages"},{"key":"ijismd.2014010102-10","doi-asserted-by":"crossref","unstructured":"Islam, S., Mouratidis, H., & Wagner, S. (2010b). Towards a framework to elicit and manage security and privacy requirements from laws and regulations. In Proceedings of 16th International Working Conference on Requirements Engineering: Foundation for Software Quality (REFSQ '10). Essen, Germany: Springer-Verlag.","DOI":"10.1007\/978-3-642-14192-8_23"},{"key":"ijismd.2014010102-11","doi-asserted-by":"crossref","unstructured":"Josang, A., Keser, C., & Dimitrakos, T. (2005). Can we manage trust? In Proceedings of the 3rd International Conference of Trust Management (iTrust), Paris, France (pp. 93-107).","DOI":"10.1007\/11429760_7"},{"key":"ijismd.2014010102-12","first-page":"113","article-title":"Holistic trust design of e-services","author":"S.Lo Presti","year":"2006","journal-title":"Trust in e-services: Technologies, practices and challenges"},{"journal-title":"Social systems","year":"1995","author":"N.Luhmann","key":"ijismd.2014010102-13"},{"key":"ijismd.2014010102-14","doi-asserted-by":"publisher","DOI":"10.1177\/0268580905055478"},{"key":"ijismd.2014010102-15","doi-asserted-by":"publisher","DOI":"10.1142\/S0218194007003240"},{"key":"ijismd.2014010102-16","unstructured":"OMG. (2008). SPEM 2.0. Retrieved March 2, 2012, from http:\/\/www.omg.org\/spec\/SPEM\/2.0\/"},{"issue":"2","key":"ijismd.2014010102-17","first-page":"36","article-title":"Modelling security using trust based concepts. International Journal of Secure Software Engineering (IJSSE)","volume":"3","author":"M.Pavlidis","year":"2012","journal-title":"Special Issue on Security Modelling"},{"key":"ijismd.2014010102-18","doi-asserted-by":"crossref","unstructured":"Pavlidis, M., Mouratidis, H., & Islam, S. (2012b). Dealing with trust and control: A meta-model for trustworthy information systems development. In Proceedings of the Sixth IEEE International Conference on Research Challenges in Information Science, Valencia, Spain.","DOI":"10.1109\/RCIS.2012.6240441"},{"key":"ijismd.2014010102-19","doi-asserted-by":"crossref","unstructured":"Pourshahid, A., & Tran, T. (2007). Modelling trust in e-commerce: An approach based on user requirement. In Proceedings of the 9th International Conference on Electronic Commerce (pp. 413-422). New York, NY: ACM.","DOI":"10.1145\/1282100.1282179"},{"key":"ijismd.2014010102-20","doi-asserted-by":"publisher","DOI":"10.1057\/palgrave.ejis.3000524"},{"key":"ijismd.2014010102-21","doi-asserted-by":"crossref","unstructured":"Uddin, M. G., & Zulekernine, M. (2008). UML-trust: Towards developing trust aware software. In Proceedings of the ACM Symposium on Applied Computing, Brazil (pp. 831-836).","DOI":"10.1145\/1363686.1363875"},{"key":"ijismd.2014010102-22","unstructured":"UK National Health System. (2002). NHS connecting for health. Retrieved March 2, 2012, from http:\/\/www.connectingforhealth.nhs.uk\/"},{"key":"ijismd.2014010102-23","doi-asserted-by":"crossref","unstructured":"Yu, E. (1997). Towards modelling and reasoning support for early-requirements engineering. In Proceedings of the 3rd IEEE International Symposium on Requirements Engineering (pp. 226-235).","DOI":"10.1109\/ISRE.1997.566873"},{"key":"ijismd.2014010102-24","doi-asserted-by":"crossref","unstructured":"Yu, E., & Liu, L. (2001). Modelling trust for system design using the i* strategic actors framework. In Proceedings of the International Workshop on Deception Fraud and Trust in Agent Societies (pp. 175-194). London, UK: Springer-Verlag.","DOI":"10.1007\/3-540-45547-7_11"},{"key":"ijismd.2014010102-25","doi-asserted-by":"publisher","DOI":"10.4018\/978-1-59904-937-3.ch163"},{"key":"ijismd.2014010102-26","doi-asserted-by":"crossref","unstructured":"Zarrabi, F., Pavlidis, M., Mouratidis, H., Islam, S., & Preston, D. (2012). A meta-model for legal compliance and trustworthiness of information systems. In Proceedings of the 2nd International Workshop on Information Systems Security Engineering (WISSE 2012) (in Conjunction with CAiSE 2012), Gdask, Poland (pp. 46-60). Springer Lecture Notes in Business Information Processing (LNBIP).","DOI":"10.1007\/978-3-642-31069-0_4"}],"container-title":["International Journal of Information System Modeling and Design"],"original-title":[],"language":"ng","link":[{"URL":"https:\/\/www.igi-global.com\/viewtitle.aspx?TitleId=106933","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,5,2]],"date-time":"2025-05-02T21:03:06Z","timestamp":1746219786000},"score":1,"resource":{"primary":{"URL":"https:\/\/services.igi-global.com\/resolvedoi\/resolve.aspx?doi=10.4018\/ijismd.2014010102"}},"subtitle":[""],"short-title":[],"issued":{"date-parts":[[2014,1,1]]},"references-count":27,"journal-issue":{"issue":"1","published-print":{"date-parts":[[2014,1]]}},"URL":"https:\/\/doi.org\/10.4018\/ijismd.2014010102","relation":{},"ISSN":["1947-8186","1947-8194"],"issn-type":[{"type":"print","value":"1947-8186"},{"type":"electronic","value":"1947-8194"}],"subject":[],"published":{"date-parts":[[2014,1,1]]}}}