Memoir: Practical state continuity for protected modules

Proceedings - IEEE Symposium on Security and Privacy

Volumn , Issue , 2011, Pages 379-394

  Parno, Bryan ^a   Lorch, Jacob R ^a   Douceur, John R ^a   Mickens, James ^a   McCune, Jonathan M ^b  

^a MICROSOFT RESEARCH   (United States)

^b CARNEGIE MELLON UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

DETERMINISTICS; FIRST SYSTEMS; ON STATE; PERFORMANCE; SECURITY ARCHITECTURE; SOFTWARE MODULES; SYSTEM CRASHES; TRUSTED HARDWARES;

EID: 80051981604     PISSN: 10816011     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/SP.2011.38     Document Type: Conference Paper

References (40)

1. R. P. Abbott, J. S. Chin, J. E. Donnelley, W. L. Konigsford, S. Tokubo, and D. A. Webb. Security analysis and enhancements of computer operating systems. Technical report, Institute for Computer Sciences and Technology, National Bureau of Standards, US Department of Commerce, Apr. 1976.
2. B. Alpern and F. B. Schneider. Defining liveness. Information Processing Letters, 21(4), Oct. 1985.
3. A. M. Azab, P. Ning, Z. Wang, X. Jiang, X. Zhang, and N. C. Skalsky. HyperSentry: Enabling stealthy in-context measurement of hypervisor integrity. In Proceedings of ACM CCS, 2010.
4. T. Bergan, O. Anderson, J. Devietti, L. Ceze, and D. Grossman. CoreDet: A compiler and runtime system for deterministic multithreaded execution. In ASPLOS, Mar. 2010.
5. T. Bergan, N. Hunt, L. Ceze, and S. D. Gribble. Deterministic process groups in dOS. In OSDI, 2010.
6. S. Berger, R. Cáceres, K. A. Goldman, R. Perez, R. Sailer, and L. van Doorn. vTPM: Virtualizing the trusted platform module. In Proceedings of USENIX Security Symposium, 2006.
7. K. Chaudhuri, D. Doligez, L. Lamport, and S. Merz. Verifying safety properties with the TLA+ proof system. In IJCAR, pages 142-148, July 2010.
8. X. Chen, T. Garfinkel, E. C. Lewis, P. Subrahmanyam, C. A. Waldspurger, D. Boneh, J. Dwoskin, and D. R. K. Ports. Overshadow: A virtualization-based approach to retrofitting protection in commodity operating systems. In Proceedings of ASPLOS, Mar. 2008.
9. B.-G. Chun, P. Maniatis, S. Shenker, and J. Kubiatowicz. Attested append-only memory: Making adversaries stick to their word. In Proceedings of SOSP, 2007.
10. J. R. Douceur, J. R. Lorch, B. Parno, J. Mickens, and J. M. McCune. Memoir - formal specs and correctness proofs. Technical Report MSR-TR-2011-19, Microsoft Research, Feb. 2011.
11. C. Dwork. Differential privacy. In Proceedings of ICALP, July 2006.
12. T. Garfinkel, B. Pfaff, J. Chow, M. Rosenblum, and D. Boneh. Terra: A virtual machine-based platform for trusted computing. In ACM SOSP, 2003.
13. B. D. Gold, R. R. Linde, and P. F. Cudney. KVM/370 in retrospect. In Proceedings of the IEEE Symposium on Security and Privacy, 1984.
14. K. Goldman. IBM's software trusted platform module. http://ibmswtpm. sourceforge.net/.
15. T. Hardjono and G. Kazmierczak. Overview of the TPM key management standard. TCG Presentations: https://www.trustedcomputinggroup.org/news/, Sept. 2008.
16. Intel Corporation. Intel architecture software developer's manual, Oct. 2005.
17. P. A. Karger, M. E. Zurko, D. W. Bonin, A. H. Mason, and C. E. Kahn. A retrospective on the VAX VMM security kernel. IEEE Transactions on Software Engineering, 17(11):1147-1165, Nov. 1991.
18. S. Katzenbeisser, K. Kursawe, and F. Stumpf. Revocation of TPM keys. In Proceedings of the Conference on Trust and Trustworthy Computing, Apr. 2009.
19. L. Lamport. Specifying systems: the TLA+ language and tools for hardware and software engineers. Addison-Wesley Professional, 2002.
20. D. Levin, J. R. Douceur, J. R. Lorch, and T. Moscibroda. TrInc: Small trusted hardware for large distributed systems. In Proc. of USENIX NSDI, 2009.
21. J. R. Lorch, A. Adya, W. J. Bolosky, R. Chaiken, J. R. Douceur, and J. Howell. The SMART way to migrate replicated stateful services. In EuroSys, Apr. 2006.
22. J. Marchesini, S. W. Smith, O. Wild, J. Stabiner, and A. Barsamian. Open-source applications of TCPA hardware. In Proceedings of IEEE ACSAC, 2004.
23. J. M. McCune, Y. Li, N. Qu, Z. Zhou, A. Datta, V. Gligor, and A. Perrig. TrustVisor: Efficient TCB reduction and attestation. In Proceedings of the IEEE Symposium on Security and Privacy, May 2010.
24. J. M. McCune, B. Parno, A. Perrig, M. K. Reiter, and H. Isozaki. Flicker: An execution infrastructure for TCB minimization. In EuroSys, Apr. 2008.
25. Microsoft Corporation. BitLocker drive encryption. http://technet. microsoft.com/en-us/library/dd548341%28WS.10%29.aspx.
26. S. C. Misra and V. C. Bhavsar. Relationships between selected software measures and latent bug-density. In Proceedings of the Conference on Computational Science and Its Applications, Jan. 2003.
27. M. Olszewski, J. Ansel, and S. Amarasinghe. Kendo: Efficient deterministic multithreading in software. In ASPLOS, Mar. 2009.
28. B. Parno, J. M. McCune, and A. Perrig. Bootstrapping trust in commodity computers. In Proceedings of the IEEE Symposium on Security and Privacy, May 2010.
29. R. Rivest, L. Adleman, and M. Dertouzos. On data banks and privacy homomorphisms. In Foundations of Secure Computation, 1978.
30. R. Rodrigues, M. Castro, and B. Liskov. BASE: Using abstraction to improve fault tolerance. In SOSP, 2001.
31. R. Sahita, U. Warrier, and P. Dewan. Dynamic software application protection. http://blogs.intel.com/research/trusted%20dynamic%20launch-flyer-rls pss001.pdf, Apr. 2009.
32. L. Sarmenta, M. van Dijk, C. O'Donnell, J. Rhodes, and S. Devadas. Virtual monotonic counters and count-limited objects using a TPM without a trusted OS. In Proceedings of the ACM Workshop on Scalable Trusted Computing (STC), 2006.
33. L. Singaravelu, C. Pu, H. Haertig, and C. Helmuth. Reducing TCB complexity for security-sensitive applications: Three case studies. In EuroSys, 2006.
34. M. M. Swift, B. N. Bershad, and H. M. Levy. Improving the reliability of commodity operating systems. ACM Transactions on Computer Systems, 22(4), 2004.
35. R. Ta-Min, L. Litty, and D. Lie. Splitting interfaces: Making trust between applications and operating systems configurable. In Proceedings of OSDI, 2006.
36. R. Toegl, T. Winkler, M. E. Steurer, M. Pirker, C. Pointner, T. Holzmann, M. Gissing, and J. Sabongui. IAIK jTSS - TCG software stack for the Java platform. v0.5 http://trustedjava.sourceforge.net/.
37. Trusted Computing Group. Trusted Platform Module Main Specification. Version 1.2, Revision 103, 2007.
38. Trusted Computing Group. Summary of Features Under Consideration for the Next Generation of TPM. http://www.trustedcomputinggroup.org, 2009.
39. D. A. Wheeler. Linux kernel 2.6: It's worth more! http://www.dwheeler. com/essays/linux-kernel-cost.html, Oct. 2004.
40. A. C. Yao. Theory and applications of trapdoor functions. In Proceedings of IEEE Symposium on Foundations of Computer Science, 1982.