Trustworthy clients: Extending TNC to web-based environments

Computer Communications

Volumn 32, Issue 5, 2009, Pages 1006-1013

  Rehbock, Sascha ^a   Hunt, Ray ^a  

^a UNIVERSITY OF CANTERBURY   (New Zealand)

Author keywords

Integrity measurement; SAML; TNC; Web applications; WS Trust

Indexed keywords

WORLD WIDE WEB;

INTEGRITY MEASUREMENT; SAML; TNC; WEB APPLICATIONS; WS-TRUST;

INTERNET PROTOCOLS;

EID: 61349102383     PISSN: 01403664     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.comcom.2008.12.040     Document Type: Article

References (24)

1. D. Austin, S. Peruvemba, S. McCarron, M. Ishikawa, M. Birbeck, XHTML Modularization 1.1 - W3C Working Draft, July 2006.
2. J.M. Boyer, M. Dubinko, L.L. Klotz, D. Landwehr, R. Merrick, T.V. Raman, XForms 1.0 (third ed.) W3C Recommendation, October 2007.
3. D. Carlisle, P. Ion, R. Miner, N. Poppelier, Mathematical Markup Language (MathML) Version 2.0 (second ed.) - W3C Recommendation, October 2003.
4. Computer Emergency Response Team (CERT), Carnegie Mellon University, CERT Statistics, July 2007.
5. M. Gudgin, M. Hadley, N. Mendelsohn, J.-J. Moreau, H.F. Nielsen, SOAP Version 1.2 Part 1: Messaging Framework, June 2003, Retrieved 04.03.2008.
6. V. Haldar, D. Chandra, M. Franz, Semantic remote attestation: a virtual machine directed approach to trusted computing, in: USENIX Virtual Machine Research and Technology Symposium, 2004, pp. 29-41.
7. H. Lockhart, S. Andersen, J. Bohren, Y. Sverdlov, M. Hondo, H. Maruyama, A. Nadalin, N. Nagaratnam, T. Boubez, S. Morrison, C. Kaler, A. Nanda, D. Schmidt, D. Walters, H. Wilson, L. Burch, D. Earl, S. Baja, H. Prafullchandra, Web Services Federation Language (WS-Federation) Version 1.1, December 2006.
8. A. Nadalin, M. Goodner, M. Gudgin, A. Barbir, H. Granqvist, WS-Trust 1.3, March 2007.
9. A. Nadalin, M. Goodner, M.M. Gudgin, A.B.A.H. Granqvist, WS-SecurityPolicy 1.2, July 2007.
10. A. Nadalin, C. Kaler, R. Monzillo, P. Hallam-Baker, Web Services Security: SOAP Message Security 1.1, February 2006.
11. P. Nikander, Denial-of-Service, Address Ownership, and Early Authentication in the IPv6 World, 2002.
12. Peng T., Leckie C., and Ramamohanarao K. Survey of network-based defense mechanisms countering the DoS and DDoS problems. ACM Comput. Surv. 39 1 (2007) 3
13. N. Ragouzis, J. Hughes, R. Philpott, E. Maler, Security Assertion Markup Language (SAML) V2.0 Technical Overview, Working Draft 10, 2006.
14. A.-R. Sadeghi, C. Stüble, Property-based attestation for computing platforms: caring about properties, not mechanisms, in: NSPW'04: Proceedings of the 2004 Workshop on New Security Paradigms, ACM, 2004, pp. 67-77.
15. R. Sailer, T. Jaeger, X. Zhang, L. van Doorn, Attestation-based policy enforcement for remote access, in: CCS'04: Proceedings of the 11th ACM Conference on Computer and Communications Security, New York, NY, USA, ACM Press, 2004, pp. 308-317.
16. The Internet Society Network Working Group, Hypertext Transfer Protocol - HTTP/1.1, 1999.
17. The Internet Society Network Working Group, HTTP Over TLS, May 2000.
18. Trusted Computing Group, TCG Specification Architecture Overview Version 1.4, 2007.
19. Trusted Computing Group, TCG Trusted Network Connect TNC Architecture for Interoperability - Specification Version 1.2, 2007.
20. Trusted Computing Group, TCG Trusted Network Connect TNC IF-IMC, 2007.
21. Trusted Computing Group, TCG Trusted Network Connect TNC IF-IMV, 2007.
22. Trusted Computing Group, TCG Trusted Network Connect TNC IF-TNCCS, 2007.
23. University of Applied Sciences and Art Hannover, TNC@FHH - http://tnc.inform.fh-hannover.de/wiki/index.php/Main_Page.
24. S. Yoshihama, T. Ebringer, M. Nakamura, S. Munetoh, H. Maruyama, WS-Attestation: efficient and fine-grained remote attestation on web services, in: ICWS'05: Proceedings of the IEEE International Conference on Web Services, IEEE Computer Society, 2005, pp. 743-750.