    @article {kolar2019trust,
	title = {A Model Specification for the Design of Trust Negotiations},
	journal = {Computers \& Security},
	volume = {84},
	year = {2019},
	month = {04/2019},
	pages = {288-300},
	publisher = {Elsevier},
	type = {Full article},
	abstract = {<p>Trust negotiation is a type of trust management model for establishing trust between entities by a mutual exchange of credentials. This approach was designed for online environments, where the attributes of users, such as skills, habits, behaviour and experience are unknown. Required criteria of trust negotiation must be supported by a trust negotiation model in order to provide a functional, adequately robust and efficient application. Such criteria were identified previously. In this paper we are presenting a model specification using a UML-based notation for the design of trust negotiation. This specification will become a part of the Software Development Life Cycle, which will provide developers a strong tool for incorporating trust and trust-related issues into the software they create. The specification defines components and their layout for the provision of the essential functionality of trust negotiation on one side as well as optional, additional features on the other side. The extra features make trust negotiation more robust, applicable for more scenarios and may provide a privacy protection functionality.</p>
},
	keywords = {Policy, Software Development Life Cycle, Trust Model, Trust Negotiation, UML},
	issn = {0167-4048},
	doi = {10.1016/j.cose.2019.03.024},
	url = {https://www.sciencedirect.com/science/article/pii/S0167404818310484},
	author = {Martin Kolar and Carmen Fernandez-Gago and Javier Lopez}
}
@article {Ruben2017trust,
	title = {Modelling Privacy-Aware Trust Negotiations},
	journal = {Computers \& Security},
	volume = {77 },
	year = {2018},
	pages = {773-789},
	publisher = {Elsevier},
	abstract = {<p>Trust negotiations are mechanisms that enable interaction between previously unknown users. After exchanging various pieces of potentially sensitive information, the participants of a negotiation can decide whether or not to trust one another. Therefore, trust negotiations bring about threats to personal privacy if not carefully considered. This paper presents a framework for representing trust negotiations in the early phases of the Software Development Life Cycle (SDLC). The framework can help software engineers to determine the most suitable policies for the system by detecting conflicts between privacy and trust requirements. More precisely, we extend the SI* modelling language and provide a set of predicates for defining trust and privacy policies and a set of rules for describing the dynamics of the system based on the established policies. The formal representation of the model facilitates its automatic verification. The framework has been validated in a distributed social network scenario for connecting drivers with potential passengers willing to share a journey.</p>
},
	keywords = {Goal-Oriented Modelling, Policy, privacy, Requirements Engineering, Secure Software Engineering, Trust},
	issn = {0167-4048},
	doi = {10.1016/j.cose.2017.09.015},
	author = {Ruben Rios and Carmen Fernandez-Gago and Javier Lopez}
}
