Specification and Standardization of a Java Trusted Computing API

Software - Practice and Experience

Volumn 42, Issue 8, 2012, Pages 945-965

  Toegl, Ronald ^a   Winkler, Thomas ^b   Nauman, Mohammad ^c   Hong, Theodore W ^d  

^a GRAZ UNIVERSITY OF TECHNOLOGY   (Austria)

^b UNIVERSITY OF KLAGENFURT   (Austria)

^c Computer Science Research and Development Unit ^*  (Pakistan)

^d UNIVERSITY OF CAMBRIDGE   (United Kingdom)

Author keywords

Java; standardization; trusted computing

Indexed keywords

API DESIGN; APPLICATION SOFTWARES; COMMODITY HARDWARE; COMPUTING ENVIRONMENTS; CORE FUNCTIONALITY; DESIGN GOAL; HARDWARE COMPONENTS; JAVA; JAVA SPECIFICATION REQUESTS; TESTING STRATEGIES; TRUSTED COMPUTING; TRUSTED COMPUTING GROUPS; TRUSTED PLATFORM MODULE;

COMPUTER SYSTEMS; DESIGN; HARDWARE; NETWORK SECURITY;

STANDARDIZATION;

EID: 84863720695     PISSN: 00380644     EISSN: 1097024X     Source Type: Journal    
DOI: 10.1002/spe.1095     Document Type: Article

References (64)

1. Challener D, Yoder K, Catherman R, Safford D, van Doorn L,. A Practical Guide to Trusted Computing, 1st edn. IBM Press. 2008.
2. Shim R, Mainelli T, O'Donnell B, Chute C, Pulskamp F, Rau S,. Worldwide interfaces and technologies embedded in PCs 2010-2014 forecast. Technical Report Technical Report, IDC, 2010.
3. Getov V, von Laszewski G, Philippsen M, Foster IT,. Multiparadigm communications in Java for grid computing. Communications of the ACM 2001; 44 (10): 118-125.
4. Selhorst M, Stueble C, Teerkorn F,. TSS Study, Technical Report, Technical Report, Sirrix AG, 2008.
5. Stueble C, Zaerin A,. μTSS-a simplified trusted software stack. Proceedings of the 3rd International Conference on Trust and Trustworthy Computing (TRUST 2010), no. 6101 in LNCS, Springer Verlag, 2010.
6. Toegl R, Winkler T, Nauman M, Hong T,. Towards platform-independent trusted computing. STC '09: Proceedings of the 2009 ACM Workshop on Scalable Trusted Computing. ACM: New York, NY, 2009; 61-66, DOI
7. JSR321 Expert Group. JSR 321 Trusted Computing API for Java™. Proposed final draft, Java Community Process 4 2011. URL, version 11.04 [27 May 2011].
8. Trusted Computing Group. TCG TPM specification version 1.2 revision 103 2007. URL [27 May 2011].
9. Grawrock D,. Dynamics of a Trusted Platform: A Building Block Approach, ISBN 978-1934053171. Richard Bowles: Intel Press, Intel Corporation, 2111 NE 25th Avenue, JF3-330, Hillsboro, OR 97124-5961, 2009.
10. Advanced Micro Devices. AMD64 Virtualization: Secure Virtual Machine Architecture Reference Manual. Publication No. 33047, rev. 3.01 edn. May 2005.
11. Chen L, Landfermann R, Löhr H, Rohe M, Sadeghi AR, Stüble C,. A protocol for property- based attestation. STC '06: Proceedings of the First ACM Workshop on Scalable Trusted Computing. ACM, 2006.
12. Stumpf F, Tafreschi O, Röder P, Eckert C,. A robust integrity reporting protocol for remote attestation. Second Workshop on Advances in Trusted Computing (WATC '06 Fall), 2006. URL [27 May 2011].
13. Trusted Computing Group. TCG mobile trusted module specification version 1.0 revision 6, June 2008. URL [27 May 2011].
14. Kauer B,. Oslo: improving the security of trusted computing. SS'07 Proceedings of 16th USENIX Security Symposium on USENIX Security Symposium, USENIX Association: Berkeley, CA, 2007; 1-9.
15. Intel Corporation. Trusted Boot-an open source, pre- kernel/VMM module that uses Intel TXT to perform a measured and verified launch of an OS, kernel/VMM, 2008. URL [27 May 2011].
16. Sailer R, Zhang X, Jaeger T, van Doorn L,. Design and implementation of a TCG-based integrity measurement architecture. Proceedings of the 13th conference on USENIX Security Symposium-Volume 13. USENIX Association: San Diego, CA, 2004; 16-16.
17. England P,. Practical techniques for operating system attestation. Trust '08: Proceedings of the 1st International Conference on Trusted Computing and Trust in Information Technologies, Springer-Verlag: Berlin, Heidelberg, 2008; 1-13, DOI: 10.1007/978-3-540-68979-90-1
18. David Grawrock,. The Intel Safer Computing Initiative, ISBN 0-9764832-6-2. Intel Press, 2006.
19. Garfinkel T, Pfaff B, Chow J, Rosenblum M, Boneh D,. Terra: a virtual machine-based platform for trusted computing. SOSP '03: Proceedings of the Nineteenth ACM Symposium on Operating Systems Principles. ACM: New York, NY, 2003; 193-206, DOI
20. Coker G, Guttman J, Loscocco P, Sheehy J, Sniffen B,. Attestation: Evidence and trust. Information and Communications Security 2008: 1-18. URL
21. EMSCB Project Consortium. The European Multilaterally Secure Computing Base (EMSCB) project, 2004. URL [27 May 2011].
22. OpenTC Project Consortium. The Open Trusted Computing (OpenTC) project., 2005-2009. URL [27 May 2011].
23. Pirker M, Toegl R,. Towards a virtual trusted platform. Journal of Universal Computer Science 2010; 16 (4): 531-542. [27 May 2011].
24. Pirker M, Toegl R,. Dynamic enforcement of platform integrity (a short paper). Proceedings of the 3rd International Conference on Trust and Trustworthy Computing (TRUST) 2010, Lecture Notes in Computer Science, Vol. 6101. Springer Verlag, 2010.
25. Toegl R, Pirker M, Gissing M,. acTvSM: A dynamic virtualization platform for enforcement of application integrity, Proceedings of INTRUST 2010: The Second International Conference on Trusted Systems. Lecture Notes in Computer Science, Vol. 6802, Springer, 2011.
26. McCune J, Li Y, Qu N, Zhou Z, Datta A, Gligor V, Perrig A,. Trustvisor: Efficient tcb reduction and attestation, IEEE Symposium on Security and Privacy. IEEE, 2010.
27. Trusted Computing Group. TCG software stack specification, version 1.2 errata a, 2007. URL [27 May 2011].
28. Pirker M, Toegl R, Hein D, Danner P,. A PrivacyCA for anonymity and trust. Proc. Trust '09, LNCS, Vol. 5471. Springer, 2009.
29. Brickell E, Camenisch J, Chen L,. Direct anonymous attestation, Proc. CCS '04. ACM, 2004; 132-145, DOI
30. Dietrich K,. Anonymous client authentication for transport layer security, Communications and Multimedia Security Lecture Notes in Computer Science, Vol. 6109, Decker BD, Schaumüller-Bichl I, (eds). Springer, 2010; 268-280.
31. RSA Laboratories. PKCS #11 v2.20: Cryptographic Token Interface Standard, RSA Security Inc. Public-Key Cryptography Standards (PKCS), June 2004. [27 May 2011].
32. IBM Corp. Trousers-an open-source tcg software stack implementation, 2008. URL [27 May 2011].
33. Cabiddu G, Cesena E, Sassu R, Vernizzi D, Ramunno G, Lioy A,. The trusted platform agent. IEEE Software 2011; 28: 35-41.
34. Reiter A, Neubauer G, Kapfenberger M, Winter J, Dietrich K,. Seamless integration of trusted computing into standard cryptographic frameworks, Proceedings of INTRUST 2010: The Second International Conference on Trusted Systems. Lecture Notes in Computer Science, Springer, Vol. 6802, Springer, 2011.
35. Microsoft. TPM Base Services. Microsoft Developer Network, 2007. [27 May 2011].
36. Löhr H, Ramasamy HV, Sadeghi AR, Schulz S, Schunter M, Stüble C,. Enhancing grid security using trusted virtualization. Proc. ATC, Vol. 4610. LNCS, 2007; 372-384.
37. Vejda T, Toegl R, Pirker M, Winkler T,. Towards Trust Services for Language-Based Virtual Machines for Grid Computing. Proc. Trust 2008, LNCS, Vol. 4968. Springer, 2008.
38. Balfe S, Gallery E,. Mobile agents and the deus ex machina, Proceedings of the Advanced Information Networking and Applications Workshops, 2007, AINAW '07. 21st International Conference on. IEEE Computer Society, 2007.
39. Mao W, Jin H, Martin A,. Innovations for grid security from trusted computing. Security Protocols, Lecture Notes in Computer Science, Vol. 5087. Springer, 2009. URL
40. Smith M, Friese T, Engel M, Freisleben B,. Countering security threats in service-oriented on-demand grid computing using sandboxing and trusted computing techniques. Journal of Parallel and Distributed Computing 2006; 66 (9): 1189-1204.
41. Dietrich K,. An integrated architecture for trusted computing for Java enabled embedded devices. Proceedings of the 2007 ACM Workshop on Scalable Trusted Computing. ACM: Alexandria, VA, 2007; 2-6, DOI
42. Dietrich K, Pirker M, Vejda T, Toegl R, Winkler T, Lipp P,. A practical approach for establishing trust relationships between remote platforms using trusted computing. Lecture Notes in Computer Science, Vol. 4912, Springer Verlag, 2008; 156-168.
43. Sarmenta L, van Dijk M, O'Donnell C, Rhodes J, Devadas S,. Virtual monotonic counters and count-limited objects using a TPM without a trusted OS. Proc. STC '06. ACM, 2006.
44. Alam M, Zhang X, Nauman M, Ali T,. Behavioral attestation for web services (ba4ws). Proceedings of the 2008 ACM Workshop on Secure Web Services. ACM: Alexandria, VA, 2008; 21-28.
45. Baldwin A, Dalton C, Shiu S, Kostienko K, Rajpoot Q,. Providing secure services for a virtual infrastructure. SIGOPS Operating Systems Review January 2009 43: 44-51. DOI
46. Brett A, Kuntze N, Schmidt A,. Trusted watermarks. Broadband Multimedia Systems and Broadcasting, 2009. BMSB '09. IEEE International Symposium on, 2009; 1-7, DOI: 10.1109/ISBMSB.2009.5133835.
47. Lyle J,. Trustable remote verification of web services. Proc. Trust 2009: Trusted Computing, LNCS, Vol. 5471, Chen L, Mitchell C, Martin A, (eds). Springer Berlin / Heidelberg, 2009; 153-168.
48. Toegl R, Pirker M,. An ongoing game of tetris: integrating trusted computing in Java, block-by-block. Proceedings of the 1st International Conference of Future of Trust in Computing 2008, Vieweg+Teubner, 2009.
49. Toegl R,. Tagging the turtle: Local attestation for kiosk computing. Advances in Information Security and Assurance, Lecture Notes in Computer Science, Vol. 5576, Park JH, Chen HH, Atiquzzaman M, Lee C, hoon Kim T, Yeo SS, (eds). Springer Berlin / Heidelberg, 2009; 60-69, DOI
50. Xinguang P, Wei J,. Filter-based trusted remote attestation for web services. Computer Science and Information Technology (ICCSIT) 2010 3rd IEEE International Conference on, Vol. 3, 2010; 5-9, DOI: 10.1109/ICCSIT.2010. 5564906.
51. Pirker M, Toegl R, Winkler T, Vejda T,. Trusted computing for the Java™platform, 2010. URL [27 May 2011].
52. Sarmenta L, Rhodes J, Müller T,. TPM/J Java-based API for the trusted platform module, 2007. URL [27 May 2011].
53. Hermanowski M, Tews E,. Tpm4java, 2009. URL
54. Kerckhoffs A,. La cryptographie militaire. Journal Des Sciences Militaires 1883 IX.
55. Stüble C, Zaerin A,. μTSS-a simplified trusted software stack, Technical Report Technical Report, Sirrix AG, 2010.
56. Berger S, Cáceres R, Goldman KA, Perez R, Sailer R, van Doorn L,. vTPM virtualizing the trusted platform module. USENIX-SS'06: Proceedings of the 15th Conference on USENIX Security Symposium, 2006; 305-320.
57. Stumpf F, Benz M, Hermanowski M, Eckert C,. An approach to a trustworthy system architecture using virtualization. ATC, Lecture Notes in Computer Science, Vol. 4610, Xiao B, Yang LT, Ma J, Müller-Schloer C, Hua Y, (eds). Springer, 2007; 191-202.
58. Berger S, Cáceres R, Pendarakis D, Sailer R, Valdez E, Perez R, Schildhauer W, Srinivasan D,. TVDc: Managing security in the trusted virtual datacenter. SIGOPS Operating Systems Review 2008; 42 (1): 40-47. DOI
59. Ort E,. The Java Compatibility Test Tools, 2001. URL [27 May 2011].
60. Beck K,. JUnit Pocket Guide. O'Reilly Media, 2004.
61. Hoffman L, Gibbons J,. Jt harness, 2006. URL [27 May 2011].
62. Roubtsov V,. EMMA User Guide, 2006. URL
63. Schnepp I, Panenka S, Richard-Foy M,. Jsr 321 feed-back from tecom-fp7s implementation. Technical Report Technical Report. Atego 2010. Rev. 2.1.
64. Chen L, Ryan MD,. Attack, solution and verification for shared authorisation data in tcg tpm. Proceedings of Sixth International Workshop on Formal Aspects in Security and Trust (FAST'09), Lecture Notes in Computer Science, Vol. 5983, Degano P, Guttman J, (eds). 2010.