Shame on trust in distributed systems

1st USENIX Workshop on Hot Topics in Security, HotSec 2006

Volumn , Issue , 2006, Pages 19-24

  Jaeger, Trent ^a   McDaniel, Patrick ^a   Clair, Luke St ^a   Caceres, Ramon ^b   Sailer, Reiner ^b  

^a PENNSYLVANIA STATE UNIVERSITY   (United States)

^b IBM T J WATSON RESEARCH CENTER   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

EID: 77957906906     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (23)

1. Trusted Computing Group. http://www. trustedcomputinggroup.org/, Mar. 2005.
2. M. Abadi, E. Wobber, M. Burrows, and B. Lampson. Authentication in the Taos Operating System. In Proceedings of the 14th ACM Symposium on Operating System Principles, pages 256-269, Asheville, NC, USA, 1993.
3. E. Belani, A. Vahdat, T. Anderson, and M. Dahlin. The CRISIS wide area security architecture. In Proceedings of the 7th USENIX Security Symposium, Jan. 1998.
4. M. Blaze, J. Feigenbaum, J. Ioannidis, and A. D. Keromytis. The KeyNote Trust Management System, version 2. IETF RFC 2704, Sept. 1999.
5. Citrix Online, Inc. GoToMyPC: Remote Access to Your PC from Anywhere, July 2006. http://www. gotomypc.com/.
6. V. Ganapathy, T. Jaeger, and S. Jha. Retrofitting legacy code for authorization policy enforcement. In Proceedings of the 2006 IEEE Symposium on Security and Privacy, May 2006.
7. T. Garfinkel, B. Pfaff, J. Chow, M. Rosenblum, and D. Boneh. Terra: A virtual machine-based platform for trusted computing. In Proceedings of the 19th ACM Symposium on Operating System Principles( SOSP 2003), Bolton Landing, NY, USA, Oct. 2003.
8. A. L. Herzog, J. D. Guttman, D. R. Harris, J. D. Ramsdell, A. E. Segall, and B. T. Sniffen. Policy analysis and generation work at MITRE. In Proceedings of the first Annual Security-enhanced Linux Symposium, March 2005.
9. B. Hicks, K. Ahmadizadeh, and P. McDaniel. From Languages to Systems: Understanding Practical Application Development in Security-typed Languages. Technical Report NAS-TR-0035, Penn State NSRC, 2006.
10. T. Jaeger, D. King, K. Butler, S. Hallyn, J. Latten, and X. Zhang. Leveraging ipsec for mandatory perpacket access control. In Proceedings of the Second IEEE Communications Society/CreateNet International Conference on Security and Privacy in Communication Networks, Baltimore, MD, USA, Aug. 2006.
11. T. Jaeger, R. Sailer, and U. Shankar. Prima: Policyreduced integrity measurements architecture. In Proceedings of the 11th Symposium on Access Control Models and Technologies, Lake Tahoe, NV, USA, June 2006. To appear.
12. T. Jaeger, R. Sailer, and X. Zhang. Analyzing integrity protection in the SELinux example policy. In Proceedings of the 12th USENIX Security Symposium, pages 59-74, Aug. 2003.
13. S. T. King, P. M. Chen, Y. Wang, C. Verbowski, H. J. Wang, and J. R. Lorch. Subvirt: Implementing malware with virtual machines. In Proceedings of the 2006 IEEE Symposium on Security and Privacy, May 2006.
14. N. Li, B. N. Grosof, and J. Feigenbaum. Delegation logic: A logic-based approach to distributed authorization. ACM Transactions on Information and System Security (TISSEC), 6(1):128-171, Feb. 2003.
15. D. Mazieres, M. Kaminsky, M. F. Kaashoek, and E.Witchel. Separating key management from file system security. In Proceedings of the 17th ACM Symposium on Operating Systems Principles (SOSP '99), pages 124-139, 1999.
16. J. McCune, S. Berger, R. Cáceres, T. Jaeger, and R. Sailer. Deuterium: A system for distributed mandatory access control. Research Report RC23865, IBM T.J. Watson Research Center, Feb. 2006. In submission.
17. J. McCune, A. Perrig, and M. Reiter. Seeing is believing: Using camera phones for human-verifiable authentication", booktitle = "proceedings of the 2005 ieee symposium on security and privacy", address = Oakland, CA, USA, month = may, year = 2005.
18. RealVNC Ltd. About RealVNC, July 2006. http: //www.realvnc.com/.
19. R. Sailer and et al. Building a MAC-based security architecture for the Xen opensource hypervisor. In Proceedings of the 21st Annual Computer Security Applications Conference (ACSAC 2005), Miami, FL, USA, Dec. 2005.
20. R. Sailer, X. Zhang, T. Jaeger, and L. van Doorn. Design and implementation of a TCG-based integrity measurement architecture. In Proceedings of the 13th USENIX Security Symposium, San Diego, CA, USA, Aug. 2004.
21. U. Shankar, T. Jaeger, and R. Sailer. Toward automated information-flow integrity verification for security-critical applications. In Proceedings of the 2006 ISOC Networked and Distributed Systems Security Symposium (NDSS'06), San Diego, CA, USA, Feb. 2006.
22. Tresys technology, SETools policy tools for SELinux. http://www.tresys.com/selinux/ selinux\ policy\ tools.shtml.
23. X.Org. X.Org Foundation, July 2006. http:// www.x.org/.