Flicker: An execution infrastructure for tcb minimization

EuroSys'08 - Proceedings of the EuroSys 2008 Conference

Volumn , Issue , 2008, Pages 315-328

  McCune, Jonathan M ^a   Parno, Bryan J ^a   Perrig, Adrian ^a   Reiter, Michael K ^a,b   Isozaki, Hiroshi ^a,c  

^a CARNEGIE MELLON UNIVERSITY   (United States)

^b UNIVERSITY OF NORTH CAROLINA   (United States)

^c TOSHIBA CORPORATION   (Japan)

Author keywords

Late launch; Secure execution; Trusted computing

Indexed keywords

COMMODITY PROCESSORS; DEVELOPMENT ENVIRONMENTS; FINE-GRAINED ATTESTATIONS; LATE LAUNCH; SECURE EXECUTION; TRUSTED COMPUTING;

LAUNCHING;

EID: 55149108173     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1352592.1352625     Document Type: Conference Paper

References (35)

1. Advanced Micro Devices. AMD64 virtualization: Secure virtual machine architecture reference manual. AMD Publication no. 33047 rev. 3.01, May 2005.
2. D. P. Anderson. BOINC: A system for public-resource computing and storage. In Proceedings of the Workshop on Grid Computing, Nov. 2004.
3. D. P. Anderson, J. Cobb, E. Korpela, M. Lebofsky, and D. Werthimer. SETI@Home: An experiment in public-resource computing. Communications of the ACM, 45(11):56-61, 2002.
4. D. Balfanz. Access Control for Ad-hoc Collaboration. PhD thesis, Princeton University, 2001.
5. P. Barham, B. Dragovic, K. Fraser, S. Hand, T. Harris, A. Ho, R. Keugebauer, I. Pratt, and A. Warfield. Xen and the art of virtualization. In Proceedings of the Symposium on Operating Systems Principles, 2003.
6. D. Brumley and D. Song. Privtrans: Automatically partitioning programs for privilege separation. In Proceedings of USENIX Security Symposium, 2004.
7. B. Chen and R. Morris. Certifying program execution with secure procesors. In Proceedings of HotOS, 2003.
8. T. Garfinkel, B. Pfaff, J. Chow, M. Rosenblum, and D. Boneh. Terra: A virtual machine-based platform for trusted computing. In Proceedings of the Symposium on Operating System Principles, 2003.
9. D. Grawrock. The Intel Safer Computing Initiative: Building Blocks for Trusted Computing. Intel Press, 2006.
10. S. Halevi and H. Krawczyk. Public-key cryptography and password protocols. ACM Trans. Information and System Security, 2(3), 1999.
11. Hewlett-Packard, Intel, Microsoft, Phoenix, and Toshiba. Advanced configuration and power interface specification. Revision 3.0b, Oct. 2006.
12. Intel Corporation. LaGrande technology preliminary architecture specification. Intel Publication no. D52212, May 2006.
13. S. Jiang. WebALPS implementation and performance analysis. Master's thesis, Dartmouth College, 2001.
14. S. Jiang, S. Smith, and K. Minami. Securing web servers against insider attack. In Proceedings of the Computer Security Applications Conference, 2001.
15. B. Kaliski and J. Staddon. PKCS #1: RSA cryptography specifications. RFC 2437, 1998.
16. B. Kauer. OSLO: Improving the security of Trusted Computing. In Proceedings of the USENIX Security Symposium, Aug. 2007.
17. D. Kilpatrick. Privman: A library for partitioning applications. In USENIX Annual Technical-Conference, 2003.
18. J. M. McCune, B. Parno, A. Perrig, M. K. Reiter, and A. Seshadri. Minimal TCB code execution (extended abstract). In Proceedings of the IEEE Symposium on Security and Privacy, May 2007.
19. J. M. McCune, B. Parno, A. Perrig, M. K. Reiter, and A. Seshadri. How low can you go? Recommendations for hardware-supported minimal TCB code execution. In Proceedings of the ACM Conference on Architectural Support for Programming Languages and Operating Systems. Mar. 2008.
20. D. Molnar. The SETI@Home problem. ACM Crossroads, 7.1, 2000.
21. G. C. Necula and P. Lee. The design and implementation of a certifying compiler. In Proceedings of the A CM Conference on Programming Language. Design and Implementation, 1998.
22. G. C. Necula, S. McPeak, S. Rahul, and W. Weimer. CIL: Intermediate language and tools for analysis and transformation of C programs. In Proceedings of the Conference on Compilier Construction, 2002.
23. Y. K. Okuji, B. Ford, E. S. Boleyn, and K. Ishiguro. The multiboot specification. Version 0.6.95, 2006.
24. N. Provos, M. Friedl, and P. Honeyman. Preventing privilege escalation. In the USENIX Security Symposium., Aug. 2003.
25. B. Ross, C. Jackson, N. Miyake, D. Boneh, and J. C. Mitchell. Stronger password authentication using browser extensions. In Proceedings of the USENIX Security Symposium, Aug. 2005.
26. R. Sailer, X. Zhang, T. Jaeger, and L. van Doom. Design and implementation of a TCG-based integrity measurement architecture. In Proceedings of the USENIX Security Symposium, 2004.
27. A. Seshadri, M. Luk, E. Shi, A. Perrig, L. VanDoorn, and P. Khosla. Pioneer: Verifying integrity and guaranteeing execution of code on legacy platforms. In Proceedings of the Symposium on Operating Systems Principals, 2005.
28. E. Shi, A. Perrig, and L. van Doom. BIND: A time-of-use attestation service for secure distributed systems. In Proceedings of IEEE Symposium on Security and Privacy, May 2005.
29. L. Singaravelu, C. Pu, H. Haertig, and C. Helmuth. Reducing TCB complexity for security-sensitive applications: Three case studies. In Proceedings of the ACM European Conference in Computer Systems, 2006.
30. S. W. Smith and S. Weingart. Building a high-performance, programmable secure coprocessor. Computer Networks, 31(8), Apr. 1999.
31. R. Ta-Min, L. Litty, and D. Lie. Splitting interfaces: Making trust between applications and operating systems configurable. In Proceedings of the Symposium on Operating Systems Design and Implementation, 2006.
32. Trusted Computing Group. PC client specific TPM interface specification (TIS). Version 1.2, Revision 1.00, July 2005.
33. Trusted Computing Group. Trusted platform module main specification, Part 1: Design principles, Part 2: TPM structures. Part 3: Commands. Version 1.2. Revision 103, July 2007.
34. B. S. Yee. Using Secure Coprocessors. PhD thesis, Carnegie Mellon University. 1994.
35. S. Zdancewic, L. Zheng, N. Nystrom, and A. Myers. Secure program partitioning. ACM Trans. on Computer Systems, 20(3), Aug. 2002.