Why Trust is Bad for Security

Electronic Notes in Theoretical Computer Science

Volumn 157, Issue 3, 2006, Pages 3-9

  Gollmann, Dieter ^a  

^a HAMBURG UNIVERSITY OF TECHNOLOGY   (Germany)

Author keywords

Access control; security policies; trust; trust management; trusted code; trusted computing

Indexed keywords

CODES (SYMBOLS); COMPUTER PRIVACY; DATA PRIVACY; PROBLEM SOLVING; PUBLIC POLICY;

ACCESS CONTROL; SECURITY POLICIES; TRUSTED CODE; TRUSTED COMPUTING;

SECURITY OF DATA;

EID: 33646562485     PISSN: 15710661     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.entcs.2005.09.044     Document Type: Article

References (10)

1. D.E. Bell and L. J. LaPadula. Secure computer systems: Mathematical foundations and model. Technical Report M74-244, The MITRE Corporation, Bedford, MA, May 1973
2. Matt Blaze, Joan Feigenbaum, John Ioannidis, and Angelos D. Keromytis. The KeyNote Trust-Management System Version 2, September 1999. RFC 2704
3. Matt Blaze, Joan Feigenbaum, and Jack Lacy. Decentralized trust management. In Proceedings of the 1996 IEEE Symposium on Security and Privacy, pages 164-173, 1996
4. Michael Burrows, Martín Abadi, and Roger Needham. A logic of authentication. DEC Systems Research Center, Report 39, revised February 22 1990
5. Feigenbaum J. Overview of the AT&T Labs trust-management project. Security Protocols. LNCS 1550 (1998), Springer Verlag 45-50
6. Gong L., Dageforde M., and Ellison G.W. Inside Java 2 Platform Security. 2nd edition (2003), Addison-Wesley, Reading, MA
7. Trusted Computing Group. TCG Glossary, July 2004. Revision 0.1
8. Jøsang A. A logic for uncertain probabilities. International Journal of Uncertainty Fuzziness and Knowledge-Based Systems 9 3 (June 2001) 279-311
9. La Macchia B.A., Lange S., Lyons M., Martin R., and Price K.T. .NET Framework Security (2002), Addison-Wesley Professional, Boston, MA
10. US Department of Defense. DoD Trusted Computer System Evaluation Criteria, 1985. DOD 5200.28-STD