Pioneer: Verifying code integrity and enforcing untampered code execution on legacy systems

Operating Systems Review (ACM)

Volumn 39, Issue 5, 2005, Pages 1-16

  Seshadri, Arvind ^a   Perrig, Adrian ^a   Luk, Mark ^a   Van Doom, Leendert ^a   Shi, Elaine ^a   Khosla, Pradeep ^a  

^a CMU/CyLab ^*

Author keywords

Dynamic root of trust; Rootkit detection; Self check summing code; Software based code attestation; Verifiable code execution

Indexed keywords

COMPUTER ARCHITECTURE; COMPUTER HARDWARE; LEGACY SYSTEMS; PROGRAM PROCESSORS; SECURITY SYSTEMS;

DYNAMIC ROOT OF TRUST; ROOTKIT DETECTION; SELF-CHECK-SUMMING CODES; SOFTWARE-BASED CODE ATTESTATION; VERIFIABLE CODE EXECUTION;

CODES (SYMBOLS);

EID: 33845427178     PISSN: 01635980     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1095809.1095812     Document Type: Article

References (29)

1. Tripwire. http://sourceforge.net/projects/tripwire/.
2. VMware. http://www.vmware.com/.
3. AMD platform for trustworthy computing. In WinHEC, September 2003.
4. Secure virtual machine architecture reference manual. AMD Corp., May 2005.
5. Network Appliance. Postmark: A new file system benchmark. Available at http://www.netapp.com/techlibrary/3022.html, 2004.
6. W. Arbaugh. Personal communication, May 2005.
7. D. Boggs, A. Baktha, J. Hawkins, D. Marr, J. Miller, P. Roussel, R. Singhal, B. Toll, and K.S. Venkatraman. The microarchitecture of the Intel Pentium 4 processor on 90nm technology. Intel Technology Journal, 8(01), February 2004.
8. B. Chen and R. Morris. Certifying program execution with secure procesors. In Proceedings of HotOS IX, 2003.
9. A. Chuvakin. Ups and downs of unix/linux host-based security solutions. ;login: The Magazine of USENIX and SAGE, 28(2), April 2003.
10. Free Software Foundation. superopt - finds the shortest instruction sequence for a given function. http://www.gnu.org/directory/devel/compilers/ superopt.html.
11. T. Garfinkel, B. Pfaff, J. Chow, M. Rosenblum, and D. Boneh. Terra: A virtual machine-based platform for trusted computing. In In Proceedings of ACM Symposium on Operating Systems Principles (SOSP), 2003.
12. Intel Corp. LaGrande Technology Architectural Overview, September 2003.
13. Intel Corporation. IA32 Intel Architecture Software Developer's Manual Vol.1.
14. K. J. Jones. Loadable Kernel Modules. ;login: The Magazine of USENIX and SAGE, 26(7), November 2001.
15. R. Joshi, G. Nelson, and K. Randall. Denali: a goal-directed superoptimizer. In Proceedings of ACM Conference on Programming Language Design and Implementation (PLDI), pages 304-314, 2002.
16. R. Kennell and L. Jamieson. Establishing the genuinity of remote computer systems. In Proceedings of USENIX Security Symposium, August 2003.
17. S. King and P. Chen. Backtracking intrusions. In Proceedings of the ACM Symposium on Operating Systems Principles (SOSP), pages 223-236, 2003.
18. A. Klimov and A. Shamir. A new class of invertible mappings. In CHES '02: Revised Papers from the 4th International Workshop on Cryptographic Hardware and Embedded Systems, pages 470-483, 2003.
19. N. Petroni, T. Fraser, J. Molina, and W. Arbaugh. Copilot - a coprocessor-based kernel runtime integrity monitor. In Proceedings of USENIX Security Symposium, pages 179-194, 2004.
20. R. Sailer, X. Zhang, T. Jaeger, and L. van Doorn. Design and implementation of a TCG-based integrity measurement architecture. In Proceedings of USENIX Security Symposium, pages 223-238, 2004.
21. A. Seshadri, A. Perrig, L. van Doorn, and P. Khosla. SWATT: Software-based attestation for embedded devices. In Proceedings of IEEE Symposium on Security and Privacy, May 2004.
22. U. Shankar, M. Chew, and J. D. Tygar. Side effects are not sufficient to authenticate software. In Proceedings of USENIX Security Symposium, pages 89-101, August 2004.
23. E. Shi, A. Perrig, and L. van Doorn. Bind: A fine-grained attestation service for secure distributed systems. In Proc. of the IEEE Symposium on Security and Privacy, pages 154-168, 2005.
24. Trusted Computing Group (TCG). https://www.trustedcomputinggroup.org/, 2003.
25. Xiaoyun Wang, Yiqun Yin, and Hongbo Yu. Finding collisions in the full sha-1. In Proceedings of Crypto, August 2005.
26. Y. Wang, R. Roussev, C. Verbowski, A. Johnson, and D. Ladd. AskStrider: What has changed on my machine lately? Technical Report MSR-TR-2004-03, Microsoft Research, 2004.
27. Y. Wang, B. Vo, R. Roussev, C. Verbowski, and A. Johnson. Strider GhostBuster: Why it's a bad idea for stealth software to hide files. Technical Report MSR-TR-2004-71, Microsoft Research, 2004.
28. G. Wurster, P. van Oorschot, and A. Somayaji. A generic attack on checksumming-based software tamper resistance. In Proceedings of IEEE Symposium on Security and Privacy, May 2005.
29. D. Zovi. Kernel rootkits. http://www.cs.unm.edu/~ghandi/lkr.pdf.