Secure vpns for trusted computing environments

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 5471 LNCS, Issue , 2009, Pages 197-216

  Schulz, Steffen ^a   Sadeghi, Ahmad Reza ^a  

^a RUHR UNIVERSITY BOCHUM   (Germany)

Author keywords

[No Author keywords available]

Indexed keywords

ANTI VIRUS; COMPLEX NETWORKS; CRITICAL SOFTWARE; ISOLATED AREAS; OPERATING SYSTEMS; REDUCED COMPLEXITY; REMOTE ATTESTATION; SECURE CHANNELS; SECURITY ISSUES; TRUSTED COMPUTING; TRUSTED COMPUTING GROUPS; VIRTUAL PRIVATE NETWORKS; VPN SERVICES;

ACCESS CONTROL; COMPUTER ARCHITECTURE; COMPUTER OPERATING SYSTEMS; NETWORK ARCHITECTURE; NETWORK SECURITY; PERSONAL COMPUTERS; SOFTWARE AGENTS; TELECOMMUNICATION SERVICES;

NETWORK PROTOCOLS;

EID: 70350635837     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-642-00587-9_13     Document Type: Conference Paper

References (36)

1. Sadeghi, A.R., Stüble, C.: Bridging the Gap between TCPA/Palladium and Personal Security (2003), citeseer.ist.psu.edu/575430.html
2. Helmuth, C., Warg, A., Feske, N.: Mikro-SINA - Hands-on Experiences with the Nizza Security Architecture. In: Proceedings of the D.A.CH Security (March 2005)
3. Kent, S.: IP Encapsulating Security Payload (ESP). RFC 4303, Internet Engineering Task Force (December 2005)
4. Kaufman, C.: Internet Key Exchange (IKEv2) Protocol. RFC 4306, Internet Engineering Task Force (December 2005)
5. Kocher, P.C.: Timing attacks on implementations of diffie-hellman, rsa, dss, and other systems. In: Koblitz, N. (ed.) CRYPTO 1996. LNCS, vol. 1109, pp. 104-113. Springer, Heidelberg (1996)
6. Percival, C.: Cache missing for fun and profit. In: Proceedings of BSDCan 2005 (2005)
7. Sailer, R., Valdez, E., Jaeger, T., Perez, R., van Doorn, L., Griffin, J.L., Berger, S.: sHype: Secure Hypervisor Approach to Trusted Virtualized Systems. Research Report RC23511, IBM Research (February 2005)
8. Garfinkel, T., Pfaff, B., Chow, J., Rosenblum,M., Boneh, D.: Terra: A VirtualMachine-Based Platform for Trusted Computing. In: Proceedings of the 9th ACM Synopsium on Operating System Principles, pp. 193-206 (2003)
9. Shapiro, J., Hardy, N.: EROS: A Principle-Driven Operating System from the Ground Up. IEEE Software, 26-33 (January 2002)
10. Härtig, H., Hohmuth, M., Feske, N., Helmuth, C., Lackorzynski, A., Mehnert, F., Peter, M.: The Nizza Secure-System Architecture. In: Proceedings of IEEE CollaborateCom 2005, p. 10. IEEE Press, Los Alamitos (2005)
11. Heiser, G., Elphinstone, K., Kuz, I., Klein, G., Petters, S.M.: Towards Trustworthy Computing Systems: TakingMicrokernels to the Next Level. ACMOperating Systems Review 41(4), 3-11 (2007)
12. Syckor, J.: IPSec Infrastruktur für Mikro-SINA, Diplomarbeit, Technische Universität Dresden (November 2004), os.inf.tu-dresden.de/ papers-ps/syckor-diplom.pdf
13. McDonald, D., Metz, C., Phan, B.: PF-KEY Key Management API, Version 2. RFC 2367, Internet Engineering Task Force (July 1998)
14. Atkinson, R.: Security Architecture for the Internet Protocol. RFC 1825, Internet Engineering Task Force (August 1995)
15. Kent, S., Seo, K.: Security Architecture for the Internet Protocol. RFC 4301, Internet Engineering Task Force (2005)
16. Kent, S.: IP Authentication Header. RFC 4302, Internet Engineering Task Force (December 2005)
17. Doraswamy, N., Harkins, D.: IPsec: The new Security Standard for the Internet, Intranets and Virtual Private Networks, 2nd edn. Prentice Hall PTR, Englewood Cliffs (2003)
18. Paterson, K.G.: A Cryptographic Tour of the IPsec Standards, citeseer.ist.psu.edu/737404.html
19. Aiello, W., Bellovin, S.M., Blaze, M., Ioannidis, J., Reingold, O., Canetti, R., Keromytis, A.D.: Efficient, DoS-resistant, secure key exchange for internet protocols. In: CCS 2002: Proceedings of the 9th ACM conference on Computer and communications security, pp. 48-58. ACM, New York (2002)
20. Ferguson, N., Schneier, B.: A Cryptographic Evaluation of IPsec (2000), www.schneier.com/paper-ipsec.html
21. Bellovin, S.: Problem Areas for the IP Security Protocols. In: Proceedings of the Sixth Usenix Security Symposium (July 1996)
22. Degabriele, J.P., Paterson, K.G.: Attacking the IPsec Standards in Encryption-only Configurations (2007), eprint.iacr.org/2007/125
23. Kiraly, C., Bianchi, G., Formisano, F., Teofili, S., Lo Cigno, R.: Traffic masking in IPsec: architecture and implementation. In: Mobile and Wireless Communications Summit, 16th IST, pp. 1-5 (2007)
24. Simpson, W.A.: IKE/ISAKMP Considered Harmful. Usenix, login 24(6) (December 1999)
25. Aziz, A., Patterson, M.: Design and Implementation of SKIP. In: INET 1995 Hypermedia Proceedings (1995)
26. Kaufman, C., Perlman, R., Sommerfeld, B.: DoS protection for UDP-based protocols. In: CCS 2003: Proceedings of the 10th ACM conference on Computer and communications security, pp. 2-7. ACM, New York (2003)
27. Izadinia, V.D., Kourie, D., Eloff, J.: Uncovering identities: A study into VPN tunnel fingerprinting. Computers & Security 25(2), 97-105 (2006)
28. Storage Work Group. Tcg storage architecture core specification. Technical report, Trusted Computing Group (May 2007)
29. Lau, J., Townsley, M., Goyret, I.: Layer Two Tunneling Protocol - Version 3 (L2TPv3). RFC 3931, Internet Engineering Task Force (2005)
30. Alkassar, A., Stüble, C.: Die Sicherheitsplattform Turaya. In: Trusted Computing, pp. 86-96. Vieweg+Teubner (May 2008)
31. Härtig, H., Roitzsch, M.: Ten years of research on l4-based real-time systems. In: Proceedings of the Eighth Real-Time Linux Workshop (2006)
32. Aboba, B., Dixon, W.: IPsec-Network Address Translation (NAT) Compatibility Requirements. RFC 3715, Internet Engineering Task Force (2004)
33. Huttunen, A., Swander, B., Volpe, V., DiBurro, L., Stenberg,M.: UDP Encapsulation of IPsec ESP Packets. RFC 3948, Internet Engineering Task Force (2005)
34. Shacham, A., Monsour, R., Pereira, R., Thomas, M.: IP Payload Compression Protocol (IPComp). RFC 2393, Internet Engineering Task Force (December 1998)
35. Eronen, P.: IKEv2 Mobility and Multihoming Protocol (MOBIKE). RFC 4555, Internet Engineering Task Force (June 2006)
36. TNCWork Group. Architecture for interoperability. Specification, Trusted Computing Group (April 2008)