VPFS: Building a virtual private file system with a small trusted computing base

EuroSys'08 - Proceedings of the EuroSys 2008 Conference

Volumn , Issue , 2008, Pages 81-93

  Weinhold, Carsten ^a   Härtig, Hermann ^a  

^a DRESDEN UNIVERSITY OF TECHNOLOGY   (Germany)

Author keywords

Legacy reuse; Secure file system; Virtualization

Indexed keywords

ALTERNATIVE CONFIGURATIONS; DESIGN ALTERNATIVES; DIRECTORY STRUCTURES; FILE CONTENTS; HIGHLY SENSITIVES; LEGACY REUSE; LINES OF CODES; META DATUM; OPERATING SYSTEMS; ORDER OF MAGNITUDES; SECURE FILE SYSTEM; SYSTEM IMPLEMENTATIONS; SYSTEM STACKS; TRUSTED COMPONENTS; TRUSTED COMPUTING BASE; VIRTUALIZATION;

VISCOUS FLOW;

EID: 59249096670     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1352592.1352602     Document Type: Conference Paper

References (34)

1. Berkeley DB - Oracle Embedded Database. Located at: http://www.oracle. com/database/berkeley-db/.
2. Federal Information Processing Standards Publication 180-1: Secure Hash Standard. Available from: http://www.itl.nist.gov/fipspubs/fip180-1.htm.
3. Federal Information Processing Standards Publication 197: Announcing the Advanced Encryption Standard. Available from: http://csrc.nist.gov/publications/ fips/fips197/fips-197.pdf.
4. FUSE: Filesystem in Userspace. Located at: http://fuse.sourceforge.net/.
5. L4HQ - The L4 Headquarters. Located at: http://www.14hq.org/.
6. L4Linux. Located at: http://os.inf.tu-dresden.de/L4/Linux0nL4/.
7. PostMark Filesystem Performance Benchmark. Located at: htt\p://www.netapp.com/tech-library/3022.html.
8. Security-Enhanced Linux. Located at: http://www.nsa.gov/selinux/.
9. The Fiasco Microkernel. Located at: http://os.inf.tu-dresden.de/fiasco/.
10. The Linux Kernel Archives. Located at: http://www.kernel.org/.
11. The Month of Kernel Bugs (MoKB) Archive. Located at: http://projects. info-pull.com/mokb/.
12. Trusted Computing Group. Located at: https://www.trustedcomputinggroup. org.
13. Trusted Computing Group: TPM. Located at: https://www. trustedcomputinggroup.org/groups/tpm/.
14. M. Bellare, R. Canetti, and H. Krawczyk. Message Authentication Using Hash Functions: the HMAC Construction. CryptoBytes, 2(1):12-15, 1996.
15. R. Coker. Bonnie++. Located at: http://www.coker.com.au/bonnie++/.
16. N. Feske and C. Helmuth. A Nitpicker's Guide to a Minimal-Complexity Secure GUI. In ACSAC'05: Proceedings of the 21st Annual Computer Security Applications Conference, pages 85-94, Washington. DC, USA, 2005. IEEE Computer Society.
17. C. Frost, M. Mammarella, E. Kohler, A. de los Reyes, S. Hovsepian, A. Matsuoka, and L. Zhang. Generalized File System Dependencies. In SOSP'07: Proceedings of Twenty-First ACM SIGOPS Symposium on Operating Systems Principles, pages 307-320, New York, NY, USA, 2007. ACM.
18. K. Goldman, R. Perez, and R. Sailer. Linking Remote Attestation to Secure Tunnel Endpoints. In STC'06: Proceedings of the First ACM Workshop on Scalable Trusted Computing, pages 21-24, New York, NY. USA, 2006. ACM Press.
19. L. Gong. A Secure Identity-Based Capability System. In IEEE Symposium on Security and Privacy, pages 56-65, Los Alamitos, CA, USA,' May 1989. IEEE Computer Society.
20. V. Gough. EncFS Encrypted Filesystem. Located at: http://arg0.net/wiki/ encfs.
21. H. Härtig, M. Hohmuth, N. Feske, C. Helmuth, A. Lackorzynski, F. Mehnert, and M. Peter. The Nizza Secure-System Architecture. In Proceedings of CollaborateCom, 2005.
22. M. Hohmuth, M. Peter, H. Härtig, and J. S. Shapiro. Reducing TCB Size by Using Untrusted Components - Small Kernels versus Virtual-Machine Monitors. In Proceedings of the Eleventh ACM SIGOPS European Workshop, Leuven, Belgium, Sept. 2004.
23. B. Kauer. Authenticated Booting for L4, November 2004. Available from: http://os.inf.tu-dresden.de/papers-ps/kauer-beleg.pdf.
24. J. Li, M. Krohn, D. Mazières, and D. Shasha. Secure Untrusted Data Repository (SUNDR). In Proceedings of the 6th USENIX Symposium on Operating Systems Design and Implementation (OSDI), pages 121-136, San Francisco, CA, Dec. 2004.
25. U. Maheshwari, R. Vingralek, and B. Shapiro. How to Build a Trusted Database System on Untrusted Storage. In Proceedings of the 4th USENIX Symposium on Operating System Design and Implementation (OSDI), pages 135-150, San Diego, CA, Oct. 2000.
26. T. J. McCabe. A Complexity Measure. In IEEE Transactions on Software Engineering, SE2(4):308-320, December 1976.
27. R. Merkle. Protocols for Public Key Cryptosystems. In Proceedings of the IEEE Symposium on Security and Privacy, pages 122-134, 1980.
28. Microsoft Corporation. Secure Startup - Full Volume Encryption: Technical Overview. Available from: http://www.microsoft.com/whdc/system/platform/ pcdesign/secure-start-tech.mspx,
29. M.-J. O. Saarinen. Encrypted Watermarks and Linux Laptop Security. In C. H. Lim and M. Yung, editors, Information Security Applications, 5th International Workshop, volume 3325 of Lecture Notes in Computer Science, pages 27-38. Springer, 2004.
30. L. Singaravelu, C. Pu, H. Härtig, and C. Helmuth. Reducing TCB Complexity for Security-Sensitive Applications: Three Case Studies. In EuroSys'06: Proceedings of the ACM SIGOPS/EuroSys European Conference on Computer Systems 2006, pages 161-174, New York, NY, USA, 2006. ACM.
31. R. Ta-Min, L. Litty, and D. Lie. Splitting Interfaces: Making Trust Between Applications and Operating-Systems Configurable. In 7th USENIX Symposium on Operating Systems Design and Implementation (OSDI 2006), November 2006.
32. C. Weinhold. Design and Implementation of a Trustworthy File System for L4. Master's thesis, TU - Dresden, 2006. available at: http://os.inf.tu-dresden. de/papers-ps/weinhold-diplom.pdf.
33. J. Wires and M. J. Feeley. Secure File System Versioning at the Block Level. In EuroSys'07: Proceedings of the ACM SIGOPS/EuroSys European Conference on Computer Systems 2007, pages 203-215, New York, NY, USA, 2007. ACM Press.
34. C. Wright, M. Martino, and E. Zadok. NCryptfs: A Secure and Convenient Cryptographic File System. In Proceedings of the Annual USENIX Technical Conference, pages 197-210, June 2003.