Socio-economic models for trust and trustworthiness evaluation

The goal of this deliverable is to describe the first detailed model of trust and trustworthiness, in-cluding metrics in the context of modelled socio-economic and technical risks, and controls identi-fied from work packages 3-6 of the project. The motivation behind the development of such se-mantic models of trust and trustworthiness is that system designers using a risk-based approach to capture security requirements often lack expertise in potential threats and countermeasures and may overlook threats they don't understand, or that they subjectively believe are not important for their particular system. While risk-based methods are helpful in addressing system vulnerabilities at design time, they are not well related to socio-economic concepts of trust and trustworthiness and the information from design-time risk-based analysis is not yet utilised systematically at run-time.

We conclude with insights into future work which needs to be conducted in order to enable the full integration of the WP2 models into other work package developments.