Dr. Audun Jøsang

Professor, University of Oslo

Adjunct Professor, QUT

New contact details:

• Publications
• Subjective logic

Research Interests

Identity management is a crucial enabler for the development of online services. The problem with current identity management is that the solutions are designed to be practical from the service providers point of view. These solutions do not scale, and provide poor usability for service consumers. A new user-centric approach is needed to make online service provision scalable for all.

Subjective logic is a type of probabilistic logic that explicitly takes uncertainty into account. A fundamental aspect of the human condition is that beliefs about the world are always partly uncertain and are always held and expressed by individual entities. This subjectivity can be explicitly reflected in the logic expressions and conclusions. Subjective logic is suitable for modelling and analysing situations characterised by uncertainty and incomplete knowledge. Subjective logic is particularly suitable for modelling trust networks.

Trust management for open computer networks includes developing trust and reputation systems that can assist users and organisations in assessing the trustworthiness of resources and remote parties on the Internet. Subjective Logic is compatible with Bayesian reputation systems, which provides a simple and elegant way of combining reputation systems with belief and trust reasoning.

Security usability is a crucial but largely ignored element in the security chain. Poor usability of security directly leads to security vulnerabilities that can be exploited by hackers and criminals. People are often the weakest link in the security chain of systems and applications. This serious problem is amplified by poor security usability. The problem of poor security usability was already pointed out by the Belgian cryptographer Kerckhoffs in 1883.

Biography

Audun Jøsang joined QUT as Associate Professor in August 2005. In 2008 he became Professor at the University of Oslo, and at the same time Adjunct Professor at QUT. Prior to that, he was the research leader of the Security Unit at DSTC in Brisbane, worked in the telecommunications industry for Alcatel in Belgium and for Telenor in Norway. He was also Associate Professor at the Norwegian University of Science and Technology (NTNU). He has a Masters in Information Security from Royal Holloway College London, and a PhD from NTNU in Norway.