Measuring semantic integrity for remote attestation

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 5471 LNCS, Issue , 2009, Pages 81-100

  Baiardi, Fabrizio ^a   Cilea, Diego ^a   Sgandurra, Daniele ^a   Ceccarelli, Francesco ^b  

^a UNIVERSITY OF PISA   (Italy)

^b ENEL   (Italy)

Author keywords

[No Author keywords available]

Indexed keywords

CLIENT SOFTWARE; CONSISTENCY CHECKS; CONTROL CHANNELS; DYNAMIC BEHAVIOURS; INCOMING CONNECTIONS; INTEGRITY MEASUREMENT; REMOTE ATTESTATION; REMOTE SERVERS; REMOTE SYSTEMS; SECURE CHANNELS; SECURITY POLICY; SEMANTIC INTEGRITY; VIRTUAL MACHINE INTROSPECTION; VIRTUAL MACHINES; VIRTUALIZATIONS;

COMPUTER SCIENCE; COMPUTER SOFTWARE; SECURITY SYSTEMS; WIRELESS TELECOMMUNICATION SYSTEMS;

QUALITY ASSURANCE;

EID: 70350637699     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-642-00587-9_6     Document Type: Conference Paper

References (31)

1. Cabuk, S., Dalton, C.I., Ramasamy, H., Schunter, M.: Towards automated provisioning of secure virtualized networks. In: CCS 2007: Proceedings of the 14th ACM conference on Computer and communications security, pp. 235-245. ACM, New York (2007)
2. Griffin, J., Jaeger, T., Perez, R., Sailer, R., van Doorn, L., Caceres, R.: Trusted Virtual Domains: Toward secure distributed services. In: Proc. of 1st IEEE Workshop on Hot Topics in System Dependability (HotDep) (2005)
3. Garfinkel, T., Pfaff, B., Chow, J., Rosenblum, M., Boneh, D.: Terra: A virtual machine-based platform for trusted computing. In: Proceedings of the 19th Symposium on Operating System Principles(SOSP 2003) (October 2003)
4. Sailer, R., Zhang, X., Jaeger, T.: Design and implementation of a TCG-based integrity measurement architecture. In: Proceedings of the 13th conference on USENIX Security Symposium, pp. 223-238 (2004)
5. Kyle, D., Brustoloni, J.C.: Uclinux: a linux security module for trusted-computingbased usage controls enforcement. In: STC 2007: Proceedings of the 2007 ACM workshop on Scalable trusted computing, pp. 63-70. ACM, New York (2007)
6. Jansen, B., Ramasamy, H., Schunter,M.: Policy enforcement and compliance proofs for Xen virtual machines. In: Proceedings of the fourth ACM SIGPLAN/SIGOPS international conference on Virtual execution environments, pp. 101-110 (2008)
7. Sailer, R., Jaeger, T., Zhang, X., van Doorn, L.: Attestation-based policy enforcement for remote access. In: CCS 2004: Proceedings of the 11th ACM conference on Computer and communications security, pp. 308-317. ACM, New York (2004)
8. Seshadri, A., Luk, M., Shi, E., Perrig, A., van Doorn, L., Khosla, P.: Pioneer: verifying code integrity and enforcing untampered code execution on legacy systems. In: SOSP 2005: Proceedings of the twentieth ACM symposium on Operating systems principles, pp. 1-16. ACM, New York (2005)
9. Sadeghi, A.R., Stüble, C.: Property-based attestation for computing platforms: caring about properties, not mechanisms. In: NSPW 2004: Proceedings of the 2004 workshop on New security paradigms, pp. 67-77. ACM, New York (2004)
10. Chen, L., Landfermann, R., Löhr, H., Rohe, M., Sadeghi, A., Stüble, C.: A protocol for property-based attestation. In: Proceedings of the first ACM workshop on Scalable trusted computing, pp. 7-16. ACM, New York (2006)
11. Poritz, J., Schunter, M., Van Herreweghen, E., Waidner, M.: Property attestation: scalable and privacy-friendly security assessment of peer computers. Research Report RZ3548, IBM Corporation (May 2004)
12. Petroni Jr., N., Fraser, T., Walters, A., Arbaugh, W.: An Architecture for Specification-Based Detection of Semantic Integrity Violations in Kernel Dynamic Data. In: Proc. of the 15th USENIX Security Symposium (2006)
13. Haldar, V., Chandra, D., Franz, M.: Semantic remote attestation: a virtual machine directed approach to trusted computing. In: VM 2004: Proceedings of the 3rd conference on Virtual Machine Research And Technology Symposium, Berkeley, CA, USA, p. 3. USENIX Association (2004)
14. Jaeger, T., Sailer, R., Shankar, U.: PRIMA: policy-reduced integrity measurement architecture. In: Proceedings of the eleventh ACM symposium on Access control models and technologies, pp. 19-28. ACM, New York (2006)
15. Pearson, S.: Trusted Computing Platforms, the Next Security Solution. Beaverton. Trusted Computing Group Administration, USA (2002)
16. Loscocco, P.A., Wilson, P.W., Pendergrass, J.A., McDonell, C.D.: Linux kernel integrity measurement using contextual inspection. In: STC 2007: Proceedings of the 2007 ACM workshop on Scalable trusted computing, pp. 21-29. ACM, New York (2007)
17. Bajikar, S.: Trusted Platform Module (TPM) based Security on Notebook PCs- White Paper. Mobile Platforms Group, Intel Corporation (June 20, 2002)
18. Intel: Trusted Execution Technology, http://www.intel.com/technology/ security
19. Berger, S., Cáceres, R., Goldman, K.A., Perez, R., Sailer, R., van Doorn, L.: vtpm: virtualizing the trusted platform module. In: USENIX-SS'06: Proceedings of the 15th conference on USENIX Security Symposium, Berkeley, CA, USA, p.
20. USENIX Association (2006)
21. England, P., Loeser, J.: Para-Virtualized TPM Sharing. In: Lipp, P., Sadeghi, A.-R., Koch, K.-M. (eds.) Trust 2008. LNCS, vol. 4968, pp. 119-132. Springer, Heidelberg (2008)
22. Dunlap, G., King, S., Cinar, S., Basrai, M., Chen, P.: ReVirt: enabling intrusion analysis through virtual-machine logging and replay. ACM SIGOPS Operating Systems Review 36, 211-224 (2002)
23. Garfinkel, T., Rosenblum, M.: A virtual machine introspection based architecture for intrusion detection. In: Proc. Network and Distributed Systems Security Symposium (February 2003)
24. SourceForge.net: Trusted Boot, http://sourceforge.net/projects/tboot
25. Dragovic, B., Fraser, K., Hand, S., Harris, T., Ho, A., Pratt, I., Warfield, A., Barham, P., Neugebauer, R.: Xen and the art of virtualization. In: Proceedings of the ACM Symposium on Operating Systems Principles (October 2003)
26. Sgandurra, D., Baiardi, F., Maggiari, D., Tamberi, F.: Transparent Process Monitoring in a Virtual Environment. In: Proceedings of the Third International Workshop on Views On Designing Complex Architectures (VODCA 2008), Bertinoro. ENTCS, Elsevier ScienceDirect (to appear) (2008)
27. Tamberi, F., Maggiari, D., Sgandurra, D., Baiardi, F.: Semantics-Driven Introspection in a Virtual Environment. In: Proceedings of the Fourth International Conference on Information Assurance and Security (IAS 2008), pp. 299-302 (2008)
28. OpenVPN: An Open Source SSL VPN Solution, http://openvpn.net/
29. TPM/J: Java-based API for the Trusted Platform Module (TPM), http://projects.csail.mit.edu/tc/tpmj/
30. IOzone: Filesystem Benchmark, http://www.iozone.org/
31. Mosberger, D., Jin, T.: httperf: a tool for measuring web server performance. ACM SIGMETRICS Performance Evaluation Review 26(3), 31-37 (1998)