RE: [orms] Added use-cases + comment on virtual worlds cases

["Giles Hogben" <Giles.Hogben@enisa.europa.eu>]

Title: RE: [orms] Added use-cases + comment on virtual worlds cases

Yes that makes a lot of sense. The vulnerability to collusion in this case is a feature of the social environment though. There are algorithms one can imagine which might protect against collusion. For example in a social network (or similar in VW), you might weight votes higher according to social distance (i.e. votes from my friends don't count).

Paper will be out in early November. We will launch at RSA London....


-----Original Message-----
From: Daniela Bourges Waldegg [mailto:dbw@zurich.ibm.com]
Sent: Wed 16/07/2008 23:57
To: Giles Hogben
Cc: OASIS ORMS
Subject: Re: [orms] Added use-cases + comment on virtual worlds cases

Hi Giles,
thanks for your comments; indeed, reputations of avatars in VW are 
fragile due to the ease of collusion.
In my opinion, since in this TC we are looking at portability of 
reputations (and not at reputation mechanisms per se), it would be 
important to model this fragility (or robustness, conversely) so as to 
be able to convey that when reputations are exchanged (e.g. here's a 
reputation value from XX context, robustness against collusion is YY - 
use it at your own risk ;-)

Any idea when the paper on security in virtual worlds will become 
public? I'd be very interested in reading it.

cheers
Daniela



On Jul 16, 2008, at 22:07 , Giles Hogben wrote:

> Dear All,
> I have submitted 3 use-cases to the wiki. I won't make the calls for 
> the moment since they are at midnight in my time-zone (Athens/
> Istanbul) and I'd wake up my family.
>
> Just a comment I'd like to contribute on the Virtual Worlds use-
> cases. We are producing a paper on security in virtual worlds with 
> 20 experts in the field. The consensus seems to be that reputation 
> systems generally fail in virtual worlds because participants tend 
> to try to "game" the reputation system - e.g. by colluding in clans 
> to damage a particular avatar's reputation, complaining to ODR about 
> another avatar to gain advantage in the game/world, etc.... This 
> isn't to say we shouldn't apply a standard model to reputation 
> systems which do exist in VW though - just thought this might be of 
> interest to the group. The current trend towards open standards in 
> these worlds is a very exciting development IMO - the first step 
> towards the 3D web perhaps...?
>
> Regards,
>
> Giles
>
> Giles Hogben
> Network Security Policy Expert
> European Network & Information Security Agency (ENISA)
>
>
> ---------------------------------------------------------------------
> To unsubscribe from this mail list, you must leave the OASIS TC that
> generates this mail.  Follow this link to all your TCs in OASIS at:
> https://www.oasis-open.org/apps/org/workgroup/portal/my_workgroups.php