Categorizing, Analyzing, & Managing Third Party Trust Andy - PowerPoint PPT Presentation

Categorizing, Analyzing, & Managing Third Party Trust Andy Sayler TPRC44 10/01/16

The Internet

By Randall Munroe, xkcd.com

Third Party Services

Questions

What capabilities are we entrusting to third parties?

What capabilities are we entrusting to third parties? How can this trust be violated?

What capabilities are we entrusting to third parties? How can this trust be violated? Can we reduce the degree of required trust?

What capabilities are we entrusting to third parties? How can this trust be violated? Can we reduce the degree of required trust? Can we reduce the likelihood of trust violations?

Modeling Trust

Degree of Trust (Capabilities) Types of Violation (Attacks)

Degree of Trust Types of Violation Storage (S) Implicit (P) Access (R) Compelled (C) Manipulation (W) Unintentional (U) Meta-Analysis (M) Colluding (L)

Degree of Trust Storage (S) Access (R) Manipulation (W) Meta-Analysis (M)

Degree of Trust Storage (S) Can a third party faithfully store private user data and make it available to the user upon request? Access (R) Manipulation (W) Meta-Analysis (M)

Degree of Trust Storage (S) Access (R) Can a third party read and interpret the private user data they store? Manipulation (W) Meta-Analysis (M)

Degree of Trust Storage (S) Access (R) Manipulation (W) Can a third party modify the private user data to which they have access? Meta-Analysis (M)

Degree of Trust Storage (S) Access (R) Manipulation (W) Meta-Analysis (M) Can a third party gather user metadata related to any stored private user data?

Examples

Storage (S)

Storage (S) Access (R)

Storage (S) Access (R) Manipulation (W)

Storage (S) Access (R) Manipulation (W) Meta-Analysis (M)

Types of Violation Implicit (P) Compelled (C) Unintentional (U) Colluding (L)

Types of Violation Implicit (P) Occurs when a third party violates a user’s trust in a manner approved by the third party. Compelled (C) Unintentional (U) Colluding (L)

Types of Violation Implicit (P) Compelled (C) Occurs when a third party is compelled by another actor to violate a user’s trust. Unintentional (U) Colluding (L)

Types of Violation Implicit (P) Compelled (C) Unintentional (U) Occurs when a third party unintentionally violates a user’s trust. Colluding (L)

Types of Violation Implicit (P) Compelled (C) Unintentional (U) Colluding (L) Occurs when multiple trusted parties collude to gain capabilities beyond what the user intended each to have.

Examples

Implicit Violations

Compelled Violations

Unintentional Violations

Collusion Violations

Collusion Violations ?

Managing Trust

Trust Surplus Access (R) Manipulation (W)

Traditional Trust Model Feature Provider Storage (S) User Data Access (R) Unrestricted Manipulation (W) Access Meta-Analysis (M) Full Features Trust

Client Trust Model Feature Provider Encrypted Storage (S) User Data Access (R) Controlled Access Manipulation (W) by Proxy Meta-Analysis (M) Minimal Features Trust

Distributed Trust Model Feature Provider Encrypted User Data Controlled Secret Storage Access by Proxy Provider Controlled Access Secrets Storage (S) Features Access (R) Minimal Manipulation (W) Trust Meta-Analysis (M)

Distributed Trust Model Secret Storage Feature Provider Providers Encrypted Controlled User Data Access Secret Shard Controlled Access by Proxy Controlled Access Secret Shard Storage (S) Features Access (R) Minimal Manipulation (W) Trust Meta-Analysis (M)

Distributed Trust Model

Distributed Trust Markets

Distributed Trust Markets Storage Provider Storage Provider Storage Provider Secret Secret Secret Shard Shard Shard

Digital Due Process

Digital Due Process Feature Provider Encrypted User Data Secret Storage Provider Secrets Third Party Doctrine

Digital Due Process Feature Provider Encrypted User Data Secret Storage Provider Secrets Warrant Third Party Doctrine

Alternatively...

Alternatively... Jurisdictional Arbitrage

Third Party Liability

Third Party Liability Storage Provider Secrets Liability

Third Party Liability Storage Provider Secrets Liability Insurance

Third Party Liability $$$ ? Secrets Liability Insurance

Third Party Liability $$$ ??? Secret Shard Secret Shard Liability Insurance

Third Party Liability Declare $$$ Secret Shard Secret Shard Liability Insurance

Conclusion

What capabilities are we entrusting to third parties? How can this trust be violated? Can we reduce the degree of required trust? Can we reduce the likelihood of trust violations?

Thank You

Questions?

Extra Slides

Compelled Violations

Application Storage Access Manipulation Meta-analysis Score Dropbox Full Full Full Full 12 Tresorit Full Partial Partial Full 10 Facebook Full Full Full Full 12 Gmail Full Full Full Full 12 PGP/GPG Full None None Full 6 Hangouts Full Full Full Full 12 TextSecure Full None None Minimal 4 LastPass Full Minimal Full Full 10 Amazon EC2 Full Full Full Full 12 Single SSP Full Partial Partial Full 10 Multiple SSPs Partial Minimal Minimal Partial 6 Degree of Third Party Trust Across Capabilities None Minimal Partial Full 0 1 2 3 Increasing Trust

Categorizing, Analyzing, & Managing Third Party Trust Andy - PowerPoint PPT Presentation

Categorizing, Analyzing, & Managing Third Party Trust Andy Sayler TPRC44 10/01/16 The Internet By Randall Munroe, xkcd.com Third Party Services Questions What capabilities are we entrusting to third parties? What capabilities are we

Supreme Leader Pulkit Party!!!!!! Party!!!!!! Just us Party!!!!!! What we have done

Australian Pipeline Trust Australian Pipeline Trust Managing Directors Managing Directors

2011 Delaware Trust Conference Options for Managing Trust Transfer Risk: A Practical Discussion

Secure Multi-Party Computation Lecture 15 Must We Trust ? Must We Trust ? Can

On a New Approach for Analyzing and Managing Macrofinancial Risks Robert C. Merton, PhD, School

CLUSTERING AND CATEGORIZING A n a l y z i n g Q u a l i t a t i ve D a t a CODE DEVELOPMENT

CLUSTERING AND CATEGORIZING A n a l y z i n g Q u a l i t a t i ve D a t a CODE DEVELOPMENT

Natural Language Processing with Python CS372: Spring, 20 15 Lecture 12 Categorizing and

Trust Forum Nassau, Bahamas Process of Analyzing Suspicious Transactions Reports Presented By:

Secure Multi-Party Computation Lecture 13 Must We Trust ? Can we have an auction

Liquidation and Litigation Trusts Structuring the Entity Agreement, Managing the Trust, and

JNCF 2017 2017/01/20 Private Multi-party Matrix Multiplication and Trust Computations

Multi-Party Construction Defect Litigation Managing Discovery, Allocating Liability and Damages,

DE TRUST CONFERENCE 2017 The Price is Right: Managing Inherited Art and Other Collectibles within

Evidence to All Party Parliamentary Group on British Muslims Omar Khan, Director, Runnymede Trust

A Framework for Managing and Analyzing Changes of Security Policies Achim D. Brucker Helmut

FinTech Workshop No. 1: Blockchain Brussels, Nov. 14 th - 2017 Prof. Dr. Rainer Lenz Technology

1 2 Overview What is the blockchain? How does it work? Why is there so much interest? Some

Special Topics in Cryptography Mohammad Mahmoody Logistics Most submitted PS3. If you have

Jan Mller Co-founder, CTO Chainalysis How Does Bitcoin Actually Work? This talk is not

Jan Mller Co-founder, CTO Chainalysis How Does Bitcoin Actually Work?

Yarrping the Internet Robert Beverly Naval Postgraduate School February 12, 2016 Active

Tutorial Slides for Week 4 ENEL 353: Digital Circuits Fall 2013 Term Steve Norman, PhD, PEng

Gossip Peer Sampling in Real World Amir H. Payberah (amir@sics.se) Amir H. Payberah 22 June