Scalable Trusted Computing最新文献

Trusting the open latent IC backdoors 相信开放的潜在IC后门

Scalable Trusted Computing Pub Date : 2011-10-17 DOI: 10.1145/2046582.2046584

F. Koushanfar

{"title":"Trusting the open latent IC backdoors","authors":"F. Koushanfar","doi":"10.1145/2046582.2046584","DOIUrl":"https://doi.org/10.1145/2046582.2046584","url":null,"abstract":"Since the Integrated Circuits (ICs) form the core computing and communication kernels for the personal computing, industries, governments and defense in the modern era, ensuring IC trust -- in the presence of untrusted third-party foundries and unidentified supply chains -- has become a major challenge. The prohibitive cost of manufacturing state-of-the-art ICs in nano-meter scales has made the use of contract foundries and third party Intellectual Property (IP) the dominant microelectronics business practice. The hidden backdoors into the chips are a double-edge sword. On one hand, the clandestine backdoors embedded by the reliable designers or trusted supply chain providers enable tracking or having post-fabrication control of the ICs on the production line and while in-use. On the other hand, the latent backdoors (a.k.a., Trojans) implanted by the untrusted third-party manufacturer or unknown supply chain entities enable the potential external adversaries to control, monitor, or to spy the chip software/data contents and communications.\u0000 In this talk, we question the contemporary IC backdoor research model directed by interested organizations, primarily defense and government. The talk then suggests better understanding of the hidden backdoor disclosure models to improve the quality and impact of the IC Trust research.","PeriodicalId":401412,"journal":{"name":"Scalable Trusted Computing","volume":"198 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2011-10-17","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"114749827","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 1

Scalable trust establishment with software reputation 可扩展的信任建立与软件声誉

Scalable Trusted Computing Pub Date : 2011-10-17 DOI: 10.1145/2046582.2046587

Sven Bugiel, Lucas Davi, Steffen Schulz

引用次数: 9

Achieving attestation with less effort: an indirect and configurable approach to integrity reporting 以更少的努力实现认证:一种间接和可配置的完整性报告方法

Scalable Trusted Computing Pub Date : 2011-10-17 DOI: 10.1145/2046582.2046589

J. Huh, Hyoungshick Kim, J. Lyle, Andrew P. Martin

引用次数: 1

Logically reconfigurable PUFs: memory-based secure key storage 逻辑上可重构的puf:基于内存的安全密钥存储

Scalable Trusted Computing Pub Date : 2011-10-17 DOI: 10.1145/2046582.2046594

Ilze Eichhorn, Patrick Koeberl, Vincent van der Leest

引用次数: 53

Trusted virtual domains on OKL4: secure information sharing on smartphones OKL4可信虚拟域:智能手机安全信息共享

Scalable Trusted Computing Pub Date : 2011-10-17 DOI: 10.1145/2046582.2046592

Lucas Davi, A. Dmitrienko, Christoph Kowalski, M. Winandy

{"title":"Trusted virtual domains on OKL4: secure information sharing on smartphones","authors":"Lucas Davi, A. Dmitrienko, Christoph Kowalski, M. Winandy","doi":"10.1145/2046582.2046592","DOIUrl":"https://doi.org/10.1145/2046582.2046592","url":null,"abstract":"The flexibility and computing power of modern smartphones to install and execute various applications allows for a rich user experience but also imposes several security concerns. Smartphones that are used both for private and corporate purposes do not separate the data and applications of different security domains, and users are usually too unskilled to deploy and configure extra security mechanisms. Hence, data leakage and unwanted information flow may occur.\u0000 In this paper we present the design and implementation of the Trusted Virtual Domain (TVD) security architecture for smartphones. The TVD concept separates data and applications of different security domains and automates the security configuration on devices. In particular, we build our solution on top of the OKL4 microkernel, which provides the basic isolation properties, and extend it with a framework that realizes the TVD policy enforcement for Android operating systems. Our results show that the TVD security architecture can be built and used on modern smartphones, but there are also limitations that current security kernels like OKL4 have to address to improve the user experience.","PeriodicalId":401412,"journal":{"name":"Scalable Trusted Computing","volume":"182 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2011-10-17","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"124263048","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 6

On scalability of remote attestation 论远程认证的可扩展性

Scalable Trusted Computing Pub Date : 2011-10-17 DOI: 10.1145/2046582.2046588

Emanuele Cesena, G. Ramunno, Roberto Sassu, Davide Vernizzi, A. Lioy

引用次数: 15

Are hardware performance counters a cost effective way for integrity checking of programs 硬件性能计数器是程序完整性检查的一种经济有效的方法吗

Scalable Trusted Computing Pub Date : 2011-10-17 DOI: 10.1145/2046582.2046596

Corey Malone, M. Zahran, R. Karri

引用次数: 104

RepCloud: achieving fine-grained cloud TCB attestation with reputation systems RepCloud:通过信誉系统实现细粒度的云TCB认证

Scalable Trusted Computing Pub Date : 2011-10-17 DOI: 10.1145/2046582.2046586

Anbang Ruan, Andrew P. Martin

{"title":"RepCloud: achieving fine-grained cloud TCB attestation with reputation systems","authors":"Anbang Ruan, Andrew P. Martin","doi":"10.1145/2046582.2046586","DOIUrl":"https://doi.org/10.1145/2046582.2046586","url":null,"abstract":"Security concerns for emerging cloud computing models have become the focus of much research, but little of this targets the underlying infrastructure. Trusted Cloud proposals generally assert that the Trusted Computing Base (TCB) of the cloud should be clearly defined and attested to. However, specific characteristics of trust in the cloud make such solutions difficult to implement in an effective and practical way. We present RepCloud, a reputation system for managing decentralised attestation metrics in the cloud. We observe that as being deterministic and tamper-proof, trust evidence generated by the TCG framework can be efficiently transmitted within the cloud. In a web of nodes with high connectivity and mutual-attestation frequency, corrupted nodes can be identified effectively. By modelling this web with RepCloud, we achieved a fine-grained cloud TCB attestation scheme with high confidence for trust. Cloud users can determine the security properties of the exact nodes that may affect the genuine functionalities of their applications, without obtaining much internal information of the cloud. Experiments showed that besides achieved fine-grained attestation RepCloud still incurred lower trust management overhead than existing trusted cloud proposals.","PeriodicalId":401412,"journal":{"name":"Scalable Trusted Computing","volume":"30 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2011-10-17","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"122715124","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 23

Credential life cycle management in open credential platforms (short paper) 开放凭证平台中的凭证生命周期管理(短文)

Scalable Trusted Computing Pub Date : 2011-10-17 DOI: 10.1145/2046582.2046595

Kari Kostiainen, N. Asokan

引用次数: 5

Identity verification schemes for public transport ticketing with NFC phones 使用NFC电话进行公共交通票务的身份验证方案

Scalable Trusted Computing Pub Date : 2011-10-17 DOI: 10.1145/2046582.2046591

Sandeep Tamrakar, Jan-Erik Ekberg, N. Asokan

引用次数: 24