    @article {Ruben2017trust,
	title = {Modelling Privacy-Aware Trust Negotiations},
	journal = {Computers \& Security},
	volume = {77 },
	year = {2018},
	pages = {773-789},
	publisher = {Elsevier},
	abstract = {<p>Trust negotiations are mechanisms that enable interaction between previously unknown users. After exchanging various pieces of potentially sensitive information, the participants of a negotiation can decide whether or not to trust one another. Therefore, trust negotiations bring about threats to personal privacy if not carefully considered. This paper presents a framework for representing trust negotiations in the early phases of the Software Development Life Cycle (SDLC). The framework can help software engineers to determine the most suitable policies for the system by detecting conflicts between privacy and trust requirements. More precisely, we extend the SI* modelling language and provide a set of predicates for defining trust and privacy policies and a set of rules for describing the dynamics of the system based on the established policies. The formal representation of the model facilitates its automatic verification. The framework has been validated in a distributed social network scenario for connecting drivers with potential passengers willing to share a journey.</p>
},
	keywords = {Goal-Oriented Modelling, Policy, privacy, Requirements Engineering, Secure Software Engineering, Trust},
	issn = {0167-4048},
	doi = {10.1016/j.cose.2017.09.015},
	author = {Ruben Rios and Carmen Fernandez-Gago and Javier Lopez}
}
@inproceedings {rios2016b,
	title = {Privacy-Aware Trust Negotiation},
	booktitle = {12th International Workshop on Security and Trust  Management (STM)},
	volume = {LNCS 9871},
	year = {2016},
	month = {09/2016},
	pages = {98-105},
	publisher = {Springer},
	organization = {Springer},
	address = {Heraklion, Crete, Greece},
	abstract = {<p>Software engineering and information security have traditionally followed divergent paths but lately some efforts have been made to consider security from the early phases of the Software Development Life Cycle (SDLC). This paper follows this line and concentrates on the incorporation of trust negotiations during the requirements engineering phase. More precisely, we provide an extension to the SI* modelling language, which is further formalised using answer set programming specifications to support the automatic verification of the model and the detection of privacy conflicts caused by trust negotiations.</p>
},
	keywords = {Goal-Oriented Modelling, privacy, Requirements Engineering, Secure Software Engineering, Trust},
	isbn = {978-3-319-46597-5},
	issn = {0302-9743},
	doi = {10.1007/978-3-319-46598-2 7},
	url = {http://link.springer.com/chapter/10.1007/978-3-319-46598-2_7},
	author = {Ruben Rios and Carmen Fernandez-Gago and Javier Lopez}
}
