Abstract:
I present a model of the process of trust building, that suggests that trust is like money: the rich get richer. The provision is that the cheaters do not wait for too long, on the average, with their deceit. The model explains the results of some recent empiric studies, pointing to a remarkable phenomenon of "adverse selection": a greater percentage of unreliable or malicious web merchants are found among those with certain (most popular) types of trust certificates, then among those without. While some such findings can be attributed to a lack of diligence, and even to conflicts of interest in trust authorities, the model suggests that the public trust networks would remain attractive targets for spoofing even if trust authorities were perfectly diligent. If the time permits, I shall discuss some ways to decrease this vulnerability, and some problems for exploration.

Biography:
Dusko Pavlovic was born in Sarajevo (Bosnia), and studied in Utrecht (The Netherlands) and Cambridge (UK). After an early academic career in Mathematics and Computer Science (McGill, Imperial College London, Sussex), he moved in 1999 to software research at Kestrel Institute in Palo Alto, where he initiated and led research projects in software engineering and security. He broke and fixed two standardized protocols, and designed a widely deployed security evaluation tool. He returned to teaching as of 2007, as a visiting professor of security at Oxford University, while remaining active in sponsored research, with projects in pervasive security, network dynamics, and quantum algorithms.