Keypad: An auditing file system for theft-prone devices

EuroSys'11 - Proceedings of the EuroSys 2011 Conference

Volumn , Issue , 2011, Pages 1-15

  Geambasu, Roxana ^a   John, John P ^a   Gribble, Steven D ^a   Kohno, Tadayoshi ^a   Levy, Henry M ^a  

^a UNIVERSITY OF WASHINGTON   (United States)

Author keywords

Auditing; File system; Keypad; Theft prone

Indexed keywords

AUDITING; ENCRYPTION KEY; FILE ACCESS; FILE SYSTEM; FILE SYSTEMS; KEY STORAGE; KEYPAD; NETWORK CONNECTIVITY; PROTOTYPE IMPLEMENTATIONS; THEFT-PRONE;

COMPUTER CRIME; COMPUTER OPERATING SYSTEMS; CRIME; CRYPTOGRAPHY; LAPTOP COMPUTERS; MOBILE DEVICES;

EQUIPMENT;

EID: 79955951203     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1966445.1966447     Document Type: Conference Paper

References (34)

1. Ross Anderson and Markus Kuhn. Tamper resistance: A cautionary note. In Proceedings of the 2nd USENIX Workshop on Electronic Commerce (WOEC '96), 1996.
2. Matt Blaze. A cryptographic file system for UNIX. In Proceedings of the 1st ACM Conference on Computer and Communications Security (CCS '93), 1993.
3. Dan Boneh and Matthew K. Franklin. Identity-based encryption from the Weil pairing. In Proceedings of the 21st Annual International Cryptology Conference on Advances in Cryptology (CRYPTO '01), 2001.
4. Dan Boneh, Matthew K. Franklin, Ben Lynn, Matt Pauker, Rishi Kacker, and Gene Tsudik. Identity-based encryption download. http://crypto.stanford.edu/ibe/ download.html, 2002.
5. Dan Boneh and Richard Lipton. A revocable backup system. In Proceedings of the 6th USENIX Security Symposium, 1996.
6. Mark D. Corner and Brian D. Noble. Zero-interaction authentication. In Proceedings of the Eighth Annual International Conference on Mobile Computing and Networking (MobiCom '02), 2002.
7. Mark D. Corner and Brian D. Noble. Protecting applications with transient authentication. In Proceedings of the First International Conference on Mobile Systems, Applications, and Services (MobiSys '03), 2003.
8. EncFS. EncFS encrypted filesystem. http://www.arg0.net/encfs, 2008.
9. Kevin Fu, M. Frans Kaashoek, and David Mazieres. Fast and secure distributed read-only file system. ACM Transactions on Computer Systems (TOCS), 20(1):1-24, 2002. (Pubitemid 135707562)
10. Fuse. Filesystem in userspace. http://fuse.sourceforge.net/, 2004.
11. Roxana Geambasu, Tadayoshi Kohno, Amit Levy, and Henry M. Levy. Vanish: Increasing data privacy with self-destructing data. In Proceedings of the 18th USENIX Security Symposium, 2009.
12. J. Alex Halderman, Seth D. Schoen, Nadia Heninger, William Clarkson, William Paul, Joseph A. Calandrino, Ariel J. Feldman, Jacob Appelbaum, and Edward W. Felten. Lest we remember: Cold boot attacks on encryption keys. In Proceedings of the 17th USENIX Security Symposium, 2008.
13. John H. Howard, Michael L. Kazar, Sherri G. Menees, David A. Nichols, M. Satyanarayanan, Robert N. Sidebotham, and Michael J. West. Scale and performance in a distributed file system. ACM Transactions on Computer Systems (TOCS), 6(1):51-81, 1988. (Pubitemid 18574134)
14. Imperva. Consumer password worst practices. http://www.imperva.com/docs/ WP-Consumer-Password-Worst-Practices.pdf, 2010.
15. James J. Kistler and M. Satyanarayanan. Disconnected operation in the Coda file system. In Proceedings of the 13th ACM Symposium on Operating System Principles (SOSP '91), 1991.
16. Edward K. Lee and Chandramohan A. Thekkath. Petal: Distributed virtual disks. In Proceedings of the 7th International Conference on Architectural Support for Programming Languages and Operating Systems (ASPLOS '96), 1996.
17. Philip MacKenzie and Michael K. Reiter. Delegation of cryptographic servers for capture-resilient devices. In Proceedings of the 8th ACM Conference on Computer and Communications Security (CCS '01), 2001.
18. David Mazieres, Michale Kaminsky, M. Frans Kaashoek, and Emmett Witchel. Separating key management from file system security. In Proceedings of the 17th ACM Symposium on Operating Systems Principles (SOSP '99), 1999.
19. Lily B. Mummert, Maria R. Ebling, and M. Satyanarayanan. Exploiting weak connectivity for mobile file access. In Proceedings of 15th ACM Symposium on Operating Systems Principles (SOSP '95), 1995.
20. Athicha Muthitacharoen, Benjie Chen, and David Mazieres. A low-bandwidth network file system. In Proceedings of the 18th ACM Symposium on Operating Systems Principles (SOSP '01), 2001.
21. Andrew Nusca. How to: Keep your laptop from being stolen. http://www.zdnet.com/, February 2009.
22. Radia Perlman. File system design with assured delete. In Proceedings of the 3rd IEEE International Security in Storage Workshop (SISW '05), 2005.
23. Karin Peterson, Mike J. Spreitzer, Douglas B. Terry, Marvin M. Theimer, and Alan J. Demers. Flexible update propagation for weakly consistent replication. In Proceedings of the 16th ACM Symposium on Operating Systems Principles (SOSP '97), 1997.
24. Ponemon Institute. Airport insecurity: The case of lost and missing laptops; U.S. and EMEA result. http://www.ponemon.org/data-security, 2008.
25. Niels Provos. Encrypting virtual memory. In Proceedings of the 9th USENIX Security Symposium, 2000.
26. Thomas Ristenpart, Gabriel Maganis, Arvind Krishnamurthy, and Tadayoshi Kohno. Privacy-preserving location tracking of lost or stolen devices: Cryptographic techniques and replacing trusted third parties with DHTs. In Proceedings of the 17th USENIX Security Symposium, 2008.
27. Jordan Robertson. http://www.usatoday.com/tech/news/computersecurity/ 2010-02-08-security-chip-pc-hacked-N.htm, 2010.
28. Joanna Rutkowska. Evil maid goes after TrueCrypt! http:// theinvisiblethings.blogspot.com/2009/10/evil-maid-goes-after-truecrypt.html, 2009.
29. Russel Sandberg, David Goldberg, Steve Kleiman, Dan Walsh, and Bob Lyon. Design and implementation of the Sun network file system. In Proceedings of the USENIX Annual Technical Conference, 1985.
30. Michael Savage. NHS 'loses' thousands of medical records. http://www.independent.co.uk/news/uk/politics/nhs-loses-thousands-of-medical- records-1690398. html, 2009.
31. Adi Shamir. Identity-based cryptosystems and signature schemes. In Proceedings of the 5th Annual International Cryptology Conference on Advances in Cryptology (CRYPTO '85), 1985.
32. Charlie Sorrel. Brits send 4,500 USB sticks to the cleaners. http://www.wired.com/, 2010.
33. Ahren Studer and Adrian Perrig. Mobile user location-specific encryption (MULE): Using your office as your password. In Proceedings of the 3rd ACM Conference on Wireless Network Security (WiSec '10), 2010.
34. Alma Whitten and J.D. Tygar. Why Johnny can't encrypt: a usability evaluation of PGP 5.0. In Proceedings of the 8th USENIX Security Symposium, 1999.