Scalable Trusted Computing最新文献_第3页

The diversity of TPMs and its effects on development: a case study of integrating the TPM into OpenSolaris TPM的多样性及其对开发的影响:将TPM集成到OpenSolaris中的一个案例研究

Scalable Trusted Computing Pub Date : 2010-10-04 DOI: 10.1145/1867635.1867649

Anna Shubina, S. Bratus, Wyllys Ingersol, Sean W. Smith

{"title":"The diversity of TPMs and its effects on development: a case study of integrating the TPM into OpenSolaris","authors":"Anna Shubina, S. Bratus, Wyllys Ingersol, Sean W. Smith","doi":"10.1145/1867635.1867649","DOIUrl":"https://doi.org/10.1145/1867635.1867649","url":null,"abstract":"Broad adoption of secure programming primitives such as the TPM can be hurt by programmer confusion regarding the nature and representation of failures when using a primitive. Conversely, a clear understanding of the primitive's failure modes is essential for both debugging and reducing the attack surface in the mechanisms built on it. In particular, differences in error processing and reporting logic significantly detract from such understanding.\u0000 We present a case study of diversity in TPM behaviors and its effects on a TSS implementation, which emerged from the Sun/Dartmouth TCG/OpenSolaris project, one of the goals of which was instrumenting TPM support on Solaris. At the start of the project, both parties believed the instrumentation to be well-defined and, although time-consuming, relatively straightforward. In the course of the project we had to reexamine our assumptions concerning the state of the hardware and the software involved and the view of the system as presented to someone unfamiliar with its internals. We describe some failure modes we encountered and suggest directions for remediation.","PeriodicalId":401412,"journal":{"name":"Scalable Trusted Computing","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2010-10-04","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"121436281","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 3

A practical property-based bootstrap architecture 一个实用的基于属性的引导体系结构

Scalable Trusted Computing Pub Date : 2009-11-13 DOI: 10.1145/1655108.1655114

René Korthaus, A. Sadeghi, Christian Stüble, Jing Zhan

{"title":"A practical property-based bootstrap architecture","authors":"René Korthaus, A. Sadeghi, Christian Stüble, Jing Zhan","doi":"10.1145/1655108.1655114","DOIUrl":"https://doi.org/10.1145/1655108.1655114","url":null,"abstract":"Binary attestation, as proposed by the Trusted Computing Group (TCG), is a pragmatic approach for software integrity protection and verification. However, it has also various shortcomings that cause problems for practical deployment such as scalability, manageability and privacy: On the one hand, data bound to binary values remain inaccessible after a software update and the verifier of an attestation result has to manage a huge number of binary versions. On the other hand, the binary values reveal information on platform configuration that may be exploited maliciously.\u0000 In this paper we focus on property-based bootstrap architectures with an enhanced boot loader. Our proposal improves the previous work in a way that allows a practical and efficient integration into existing IT infrastructures. We propose a solution of the version rollback problem that, in contrast to the existing approaches, is secure even if the TPM owner of the attested platform is untrusted without requiring an interaction with a trusted third party.\u0000 Finally, we show how our architecture can be applied to secure boot mechanisms of Mobile Trusted Modules (MTM) to realize a \"Property-Based Secure Boot\". This is especially important for human users, since with secure boot, users can rely on the fact that a loaded system is also in a trustworthy state.","PeriodicalId":401412,"journal":{"name":"Scalable Trusted Computing","volume":"26 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2009-11-13","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"133317057","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 17

Towards platform-independent trusted computing 走向与平台无关的可信计算

Scalable Trusted Computing Pub Date : 2009-11-13 DOI: 10.1145/1655108.1655119

Ronald Toegl, Thomas Winkler, M. Nauman, Theodore W. Hong

引用次数: 13

TruWallet: trustworthy and migratable wallet-based web authentication TruWallet:可信赖和可迁移的基于钱包的web认证

Scalable Trusted Computing Pub Date : 2009-11-13 DOI: 10.1145/1655108.1655112

S. Gajek, Hans Löhr, A. Sadeghi, M. Winandy

{"title":"TruWallet: trustworthy and migratable wallet-based web authentication","authors":"S. Gajek, Hans Löhr, A. Sadeghi, M. Winandy","doi":"10.1145/1655108.1655112","DOIUrl":"https://doi.org/10.1145/1655108.1655112","url":null,"abstract":"Identity theft has fostered to a major security problem on the Internet, in particular stealing passwords for web applications through phishing and malware. We present TruWallet, a wallet-based authentication tool that improves previous solutions for protecting web-based authentication. In contrast to other wallet-based solutions, TruWallet provides (i) strong protection for users' credentials and sensitive data by cryptographically binding them to the user's platform configuration based on Trusted Computing technology, (ii) an automated login procedure where the server is authenticated independently from (SSL) certificates, thus limiting the possibility of attacks based on hijacked certificates and allowing less dependency on the SSL PKI model, and (iii) a secure migration protocol for transferring wallet data to other platforms. Our implementation uses a small virtualization-based security kernel with trusted computing support and works with standard SSL-based authentication solutions for the web, where only minor modifications and extensions are required. It is interoperable so that we can re-use existing operating systems and applications like web browsers.","PeriodicalId":401412,"journal":{"name":"Scalable Trusted Computing","volume":"1 1","pages":"0"},"PeriodicalIF":0.0,"publicationDate":"2009-11-13","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":null,"resultStr":null,"platform":"Semanticscholar","paperid":"129473620","PeriodicalName":null,"FirstCategoryId":null,"ListUrlMain":null,"RegionNum":0,"RegionCategory":"","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":"","EPubDate":null,"PubModel":null,"JCR":null,"JCRName":null,"Score":null,"Total":0}

引用次数: 30

MYSEA: the monterey security architecture MYSEA:蒙特雷安全架构

Scalable Trusted Computing Pub Date : 2009-11-13 DOI: 10.1145/1655108.1655115

C. Irvine, Thuy D. Nguyen, D. Shifflett, T. Levin, Jean Khosalim, Charles Prince, P. Clark, Mark A. Gondree

引用次数: 12

Towards secure dataflow processing in open distributed systems 面向开放分布式系统中的安全数据流处理

Scalable Trusted Computing Pub Date : 2009-11-13 DOI: 10.1145/1655108.1655120

Juan Du, Wei Wei, Xiaohui Gu, Ting Yu

引用次数: 16

Physically restricted authentication with trusted hardware 使用可信硬件进行物理限制的身份验证

Scalable Trusted Computing Pub Date : 2009-11-13 DOI: 10.1145/1655108.1655118

Michael S. Kirkpatrick, E. Bertino