SHEMP: Secure hardware enhanced MyProxy

PST 2005 - 3rd Annual Conference on Privacy, Security and Trust, Conference Proceedings

Volumn , Issue , 2005, Pages

  Marchesini, John ^a   Smith, Sean ^b  

^a Bindview Corporation   (Canada)

^b DARTMOUTH COLLEGE   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

PRIVATE KEY;

HARDWARE;

EID: 84883290046     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (37)

1. G. Ateniese, K. Fu, M. Green, and S. Hohenberger. Improved Proxy Re-Encryption Schemes with Applications to Secure Distributed Storage. In Network and Distributed System Security Symposium. The Internet Society, 2005.
2. D. Boneh, X. Ding, G. Tsudik, and C. Wong. A method for fast revocation of public key certificates and security capabilities. In 10th USENIX Security Symposium, pages 297- 308. USENIX, 2001.
3. J. Dyer, M. Lindemann, R. Perez, R. Sailer, S. Smith, L.van Doorn, and S. Weingart. Building the IBM 4758 Secure Coprocessor. IEEE Computer, 34:57-66, October 2001.
4. I. Foster and C. Kesselman. The Grid: Blueprint for a New Computing Infrastructure. Morgan Kaufmann, 1999.
5. P. Gutmann. How to recover private keys forMicrosoft Internet Explorer, Internet Information Server, Outlook Express, and many others - or - Where do your encryption keys want to go today? www.cs.auckland.ac.nz/̃pgut001/pubs/ breakms.txt.
6. IBM Research Demonstrates Linux Running on Secure Cryptographic Coprocessor, August 2001. Press release.
7. A. Iliev and S. Smith. Privacy-Enhanced Credential Services. In 2nd Annual PKI Research Workshop. NIST, April 2003.
8. D. Lie, C. Thekkath, M. Mitchell, P. Lincoln, D. Boneh, J. Mitchell, and M. Horowitz. Architectural Support for Copy and Tamper Resistant Software. In Proceedings of the 9th Int'l Conference on Architectural Support for Programming Languages and Operating Systems, pages 168- 177, November 2000.
9. M. Lorch, J. Basney, and D. Kafura. A Hardware-secured Credential Repository for Grid PKIs. In 4th IEEE/ACM International Symposium on Cluster Computing and the Grid, April 2004.
10. R. MacDonald, S. Smith, J. Marchesini, and O. Wild. Bear: An Open-Source Virtual Coprocessor based on TCPA. Technical Report TR2003-471, Department of Computer Science, Dartmouth College, 2003.
11. J. Marchesini. SHEMP: Secure Hardware Enhanced MyProxy. PhD thesis, Dartmouth College, 2005.
12. J. Marchesini and S. Smith. Virtual Hierarchies - An Architecture for Building and Maintaining Efficient and Resilient Trust Chains. In NORDSEC2002 - 7th Nordic Workshop on Secure IT Systems, November 2002.
13. J. Marchesini, S. Smith, O. Wild, and R. MacDonald. Experimenting with TCPA/TCG Hardware, Or: How I Learned to Stop Worrying and Love The Bear. Technical Report TR2003-476, Department of Computer Science, Dartmouth College, 2003.
14. J. Marchesini, S. Smith, O. Wild, J. Stabiner, and A. Barsamian. Open-Source Applications of TCPA Hardware. In 20th Annual Computer Security Applications Conference (ACSAC), December 2004.
15. J. Marchesini, S. Smith, and M. Zhao. Keyjacking: Risks of the Current Client-side Infrastructure. In 2nd Annual PKI Resarch Workshop. NIST, April 2003.
16. J. Marchesini, S. Smith, and M. Zhao. Keyjacking: The Surprising Insecurity of Client-Side SSL. Computers and Security, 2004. In Press.
17. P. McGregor and R. Lee. Virtual Secure Co-Processing on General-purpose Processors. Technical Report CE-L2002- 003, Princeton University, November 2002.
18. J. Novotny, S. Tueke, and V. Welch. An Online Credential Repository for the Grid: MyProxy. In Proceedings of the Tenth International Symposium on High Performance Distributed Computing (HPDC-10). IEEE Press, August 2001.
19. D. of Defense. Department of Defense Trusted Computer System Evaluation Criteria. DoD 5200.28-STD, December 1985.
20. S. Pearson, editor. Trusted Computing Platforms: TCPA Technology in Context. Prentice Hall, 2003.
21. M. Periera. Trusted S/MIME Gateways, May 2003. Senior Honors Thesis. Available as TR2003-461.
22. S. Proctor. Sun's XACML Implementation. sunxacml. sourceforge.net/.
23. Securely Available Credentials-Framework. www.imc.org/ietf-sacred/index. html.
24. Securely Available Credentials-Protocol. www.imc.org/ietf-sacred/index. html.
25. Securely Available Credentials-Requirements. www.imc.org/ietf-sacred/ index.html.
26. G. Saggese, C. Basile, L. Romano, Z. Kalbarczyk, and R. Iyer. Hardware Support for High Performance, Intrusionand Fault-Tolerant Systems. In 23rd IEEE International Symposium on Reliable Distributed Systems (SRDS'04), pages 195-204, 2004.
27. R. Sailer, X. Zhang, T. Jaeger, and L. van Doorn. Design and Implementation of a TCG-based Integrity Measurement Architectrue. Technical report, IBM Research Division, RC23064, January 16, 2004. to Appear at the 13th Annual USENIX Security Symposium.
28. S. Smith. Secure Coprocessing Applications and Research Issues. Technical Report Los Alamos Unclassified Release LA-UR-96-2805, Los Alamos National Laboratory, August 1996.
29. S. Smith. WebALPS: A Survey of E-Commerce Privacy and Security Applications. ACM SIGecom Exchanges, 2.3, September 2001.
30. S. Smith. Outbound Authentication for Programmable Secure Coprocessors. International Journal on Information Security, 2004.
31. S. Smith and S. Weingart. Building a High-Performance, Programmable Secure Coprocessor. Computer Networks, 31:831-860, April 1999.
32. N. Stam. Inside Intel's Secretive 'LaGrande' Project. www.extremetech.com/September 19, 2003.
33. G. Suh, D. Clarke, B. Gassend, M. van Dijk, and S. Devadas. AEGIS: Architecture for Tamper-Evident and Tamper-Resistant processing. In In Proceedings of the 17 Int'l Conference on Supercomputing, pages 160-171, 2003.
34. Trusted Computing Platform Alliance. TCPA Design Philosophies and Concepts, Version 1.0. www.trustedcomputinggroup.org, January 2001.
35. Trusted Computing Platform Alliance. TCPA PC Specific Implementation Specification, Version 1.00. www. trustedcomputinggroup.org, September 2001.
36. Trusted Computing Platform Alliance. Main Specification, Version 1.1b. www.trustedcomputinggroup.org, February 2002.
37. XACML 1.1 Specification Set. www.oasis-open.org, July 24, 2003.