Modeling Social and Individual Trust in Requirements Engineering Methodologies

When we model and analyze trust in organizations or information systems we have to take into account two different levels of analysis: social and individual. Social levels dene the structure of organizations, whereas individual levels focus on individual agents. This is particularly important when capturing security requirements where a ihnormallyls trusted organizational role can be played by an untrusted individual. Our goal is to model and analyze the two levels nding the link between them and supporting the automatic detection of conficts that can come up when agents play roles in the organization. We also propose a formal framework that allows for the automatic verification of security requirements between the two levels by using Datalog and has been implemented in CASE tool.