Kells: A protection framework for portable data

Proceedings - Annual Computer Security Applications Conference, ACSAC

Volumn , Issue , 2010, Pages 231-240

  Butler, Kevin R B ^a   McLaughlin, Stephen E ^b   McDaniel, Patrick D ^b  

^a UNIVERSITY OF OREGON   (United States)

^b PENNSYLVANIA STATE UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

SENSITIVE DATA; VIRTUAL STORAGE;

COMPUTER LABORATORY; DESIGN AND OPERATIONS; INTERNET CAFES; KEY CHAIN; MALWARES; MOBILE STORAGE SYSTEM; PORTABLE STORAGE DEVICES; PROOF OF CONCEPT; SENSITIVE DATAS; USB DEVICES;

MALWARE;

EID: 78751542940     PISSN: 10639527     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1920261.1920296     Document Type: Conference Paper

References (40)

1. IronKey. http://www.ironkey.com, 2009.
2. K. Butler, S. McLaughlin, T. Moyer, J. Schiffman, P. McDaniel, and T. Jaeger. Firma: Disk-Based Foundations for Trusted Operating Systems. Technical Report NAS-TR-0114-2009, Penn State Univ., Apr. 2009.
3. K. R. B. Butler, S. McLaughlin, and P. D. McDaniel. Rootkit-Resistant Disks. In ACM CCS, Oct. 2008.
4. R. Cáceres, C. Carter, C. Narayanaswami, and M. Raghunath. Reincarnating PCs with portable SoulPads. In ACM MobiSys, 2005.
5. C. Castelluccia, A. Francillon, D. Perito, and C. Soriente. On the difficulty of software-based attestation of embedded devices. In ACM CCS, Nov. 2008.
6. A. Datta, J. Franklin, D. Garg, and D. Kaynar. A Logic of Secure Systems and its Application to Trusted Computing. In IEEE Symp. Sec. & Priv., May 2009.
7. J. G. Dyer, M. Lindermann, R. Perez, et al. Building the IBM 4758 Secure Coprocessor. IEEE Computer, 39(10):57-66, Oct. 2001.
8. L. J. Fraim. Scomp: A solution to the multilevel security problem. IEEE Computer, 16(7):26-34, July 1983.
9. R. Gardner, S. Garera, and A. D. Rubin. On the difficulty of validating voting machine software with software. In USENIX EVT, Aug. 2007.
10. S. Garriss, R. Cáceres, S. Berger, R. Sailer, L. van Doorn, and X. Zhang. Trustworthy and personalized computing on public kiosks. In ACM MobiSys, June 2008.
11. G. A. Gibson, D. F. Nagle, K. Amiri, et al. A Cost-Effective, High-Bandwidth Storage Architecture. In ASPLOS, 1998.
12. L. J. Hoffman and R. J. Davis. Security Pipeline Interface (SPI). In ACSAC, Dec. 1990.
13. B. Kauer. OSLO: Improving the Security of Trusted Computing. In Proc. USENIX Security Symp., Aug. 2007.
14. R. Kennell and L. H. Jamieson. Establishing the Genuinity of Remote Computer Systems. In Proc. USENIX Security Symp., Aug. 2003.
15. Kingston Technology. DataTraveler 300: World's first 256 GB Flash drive. http://www.kingston.com/ukroot/flash/dt300.asp, July 2009.
16. C. Lomax. Security tightened as secretary blamed for patient data loss. Telegraph & Argus, 4 June 2009.
17. J. M. McCune, A. Perrig, A. Seshadri, and L. van Doorn. Turtles all the way down: Research challenges in user-based attestation. In USENIX HotSec, Aug. 2007.
18. Microsoft. BitLocker and BitLocker to Go. http://technet.microsoft.com/ en-us/windows/dd408739.aspx, Jan. 2009.
19. T. Moyer, K. Butler, J. Schiffman, et al. Scalable Web Content Attestation. In ACSAC, 2009.
20. B. Parno. Bootstrapping trust in a "trusted" platform. In USENIX HotSec, Aug. 2008.
21. A. G. Pennington, J. D. Strunk, J. L. Griffin, et al. Storage-based Intrusion Detection: Watching storage activity for suspicious behavior. In Proc. USENIX Security, 2003.
22. P. Porras, H. Saidi, and V. Yegneswaran. An Analysis of Conficker's Logic and Rendezvous Points. Technical report, SRI Computer Science Lab, Mar. 2009.
23. R. Sailer, X. Zhang, T. Jaeger, and L. van Doorn. Design and Implementation of a TCG-based Integrity Measurement Architecture. In Proc. USENIX Security, Aug. 2004.
24. SanDisk. SanDisk Cruzer Enterprise. http://www.sandisk.com/business- solutions/enterprise, 2009.
25. Seagate. Self-Encrypting Hard Disk Drives in the Data Center. Technology Paper TP583.1-0711US, Nov. 2007.
26. A. Seshadri, M. Luk, E. Shi, et al. Pioneer: verifying code integrity and enforcing untampered code execution on legacy systems. In ACM SOSP, 2005.
27. A. Seshadri, A. Perrig, L. van Doorn, and P. Khosla. SWATT: SoftWare-based ATTestation for Embedded Devices. In IEEE Symp. Sec.& Priv., May 2004.
28. N. Shachtman. Under Worm Assault, Military Bans Disks, USB Drives. Wired, Nov. 2008.
29. U. Shankar, M. Chew, and J. D. Tygar. Side Effects are Not Sufficient to Authenticate Software. In Proc. USENIX Security, 2004.
30. M. Sivathanu, V. Prabhakarn, F. I. Popovici, et al. Semantically-Smart Disk Systems. In USENIX FAST, 2003.
31. R. E. Smith. Cost profile of a highly assured, secure operating system. ACM Trans. Inf. Syst. Secur., 4(1):72-101, 2001.
32. SRN Microsystems. Trojan.adware.win32.agent.bz. http://www.srnmicro.com/ virusinfo/trj10368.htm, 2009.
33. L. St. Clair, J. Schiffman, T. Jaeger, and P. McDaniel. Establishing and Sustaining System Integrity via Root of Trust Installation. In ACSAC, 2007.
34. J. Strunk, G. Goodson, M. Scheinholtz, et al. Self-Securing Storage: Protecting Data in Compromised Systems. In USENIX OSDI, 2000.
35. A. Surie, A. Perrig, M. Satyanarayanan, and D. J. Farber. Rapid trust establishment for pervasive personal computing. IEEE Pervasive Computing, 6(4):24-30, Oct.-Dec. 2007.
36. TCG. TPM Main: Part 1 - Design Principles. Specification Version 1.2, Level 2 Revision 103. TCG, July 2007.
37. TCG. TCG Storage Security Subsystem Class: Opal. Specification Version 1.0, Revision 1.0. Trusted Computing Group, Jan. 2009.
38. T. Weigold, T. Kramp, R. Hermann, et al. The Zurich Trusted Information Channel - An Efficient Defence against Man-in-the-Middle and Malicious Software Attacks. In Proc. TRUST, Villach, Austria, Mar. 2008.
39. R. Wojtczuk and J. Rutkowska. Attacking Intel Trusted Execution Technology. In Proc. BlackHat Technical Security Conf., Feb. 2009.
40. B. Yee and J. D. Tygar. Secure Coprocessors in Electronic Commerce Applications. In Proc. USENIX Wrkshp. Electronic Commerce, 1995.