Integrity management infrastructure for trusted computing

IEICE Transactions on Information and Systems

Volumn E91-D, Issue 5, 2008, Pages 1242-1251

  Munetoh, Seiji ^a   Nakamura, Megumi ^a   Yoshihama, Sachiko ^a   Kudo, Michiharu ^a  

^a IBM JAPAN LTD   (Japan)

Author keywords

Integrity management; Trusted computing; Vulnerability management

Indexed keywords

DISTRIBUTED COMPUTER SYSTEMS; MOBILE TELECOMMUNICATION SYSTEMS; NETWORK SECURITY; PUBLIC KEY CRYPTOGRAPHY; SECURITY OF DATA;

CERTIFICATE AUTHORITY; INTEGRITY MANAGEMENT; INTEGRITY MEASUREMENT; PUBLIC KEY INFRASTRUCTURE; TRUSTED COMPUTING GROUPS; TRUSTED COMPUTING TECHNOLOGY; TRUSTED THIRD PARTIES; VULNERABILITY MANAGEMENT;

TRUSTED COMPUTING;

EID: 58049186715     PISSN: 09168532     EISSN: 17451361     Source Type: Journal    
DOI: 10.1093/ietisy/e91-d.5.1242     Document Type: Article

References (27)

1. "CSI/FBI computer crime and security survey 2006."
2. Trusted Computing Group, https://www.trustedcomputinggroup.org/
3. W. Arbaugh, D. Farber, and J. Smith, "A secure and reliable bootstrap architecture," Proc. IEEE Symposium on Security and Privacy, pp.65-71, May 1997.
4. R. Sailer, T. Jaeger, X. Zhang, and L. van Doorn, "Attestation-based policy enforcement for remote access," Proc. 11th ACM Conference on Computer and Communications Security (ACMCCS 2004), 2004.
5. Trusted Computing Group, "TCG trusted network connect - TNC architecture for interoperability."
6. T. Garfinkel, B. Pfaff, J. Chow, M. Rosenblum, and D. Boneh, "Terra: A virtual machine-based platform for trusted computing," 19th ACM Symposium on Operating Systems Principles, 2003.
7. Y. Watanabe, S. Yoshihama, T. Mishina, M. Kudo, and H. Maruyama, "Bridging the gap between inter-communication boundary and inside trusted components," 11th European Symposium on Research in Computer Security (ESORICS 2006), LNCS, Springer, 2006.
8. J.L. Griffin, T. Jaeger, R. Perez, R. Sailer, L. van Doorn, and R. Caceres, "Trusted virtual domains: Toward secure distributed services," Workshop on Hot Topics in System Dependability, 2005.
9. V. Haldar, D. Chandra, and M. Franz, "Semantic remote attestation - A virtual machine directed approach to trusted computing," 3rd Virtual Machine Research and Technology Symposium, May 2004.
10. A. Sadeghi and C. Stüble, "Property-based attestation for computing platforms: Caring about properties, not mechanisms," 2004 Workshop on New Security Paradigms (NSPW 2004), pp.67-77, 2004.
11. M.E. Van Herreweghen, J. Poritz, and M.Waidner, "Property attestation - Scalable and privacy-friendly assessment of peer computers," Technical Report RZ3548, IBM Research Report, 2004.
12. S. Yoshihama, T. Ebringer, M. Nakamura, S. Munetoh, T. Mishina, and H. Maruyama, "WS-attestation: Enabling trusted computing on Web services," in Test and Analysis of Web Services, ed. L. Baresi and E. Di Nitto, pp.441-469, Springer Berlin Heidelberg, Sept. 2007.
13. Trusted Computing Group, "TPM main, version 1.2."
14. R. Sailer, X. Zhang, T. Jaeger, and L. van Doorn, "Design and implementation of a tcg-based integrity measurement architecture," 13th USENIX Security Symposium, pp.223-238, Aug. 2004.
15. Trusted Computing Group, "TCG infrastructure working group architecture Part II - Integrity management, Ver. 1.0, Rev. 1.0," Nov. 2006.
16. The MITRE Corporation, "Common vulnerabilities and exposures." http://cve.mitre.org/
17. "Open vulnerability and assessment language." http://oval.mitre.org/
18. "National vulnerability database." http://nvd.nist.gov/
19. Trusted Computing Group, "Trusted computing group, platform trust services (PTS), Ver. 1.0," Sept. 2006.
20. "xen.org." http://xen.org/
21. "Intel vPro technology: An active defense against security threats." http://www.intel.com/technology/magazine/computing/vPro-security- 0906.pdf, Sept. 2006.
22. "Open platform trust services." https://sourceforge.jp/ projects/openpts
23. Trusted Computing Group, "TCG PC client specific implementation specification for conventional BIOS, Ver 1.2," July 2005.
24. "Red hat network." https://rhn.redhat.com/
25. "Debian security." http://www.debian.org/security/
26. "Common vulnerability scoring system support." http://nvd.nist.gov/cvss.cfm
27. N.I. of Advanced Industrial Science and Technology, "Knoppix5.1.1 for trusted compuintg geeks." http://unit.aist.go.jp/itri/knoppix/, 2007.