KISS: "Key It Simple and Secure" corporate key management

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 7904 LNCS, Issue , 2013, Pages 1-18

  Zhou, Zongwei ^a   Han, Jun ^a   Lin, Yue Hsun ^a   Perrig, Adrian ^a   Gligor, Virgil ^a  

^a CARNEGIE MELLON UNIVERSITY   (United States)

Author keywords

Isolation; Key Management; Trusted Computing; Trusted Path

Indexed keywords

BOOTSTRAP PROTOCOL; ISOLATION; KEY MANAGEMENT; KEY MANAGEMENT SYSTEMS; MANAGEMENT MECHANISMS; TRUSTED COMPUTING; TRUSTED COMPUTING BASE; TRUSTED PATH;

HARDWARE;

PUBLIC KEY CRYPTOGRAPHY;

EID: 84884658327     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-642-38908-5_1     Document Type: Conference Paper

References (25)

1. AMD. AMD64 architecture programmer's manual. No. 24594 rev. 3.19 (2012)
2. Bugiel, S., Ekberg, J.: Implementing an application-specific credential platform using late-launched mobile trusted module. In: Proc. ACM STC (2010)
3. Cheng, Y., Ding, X., Deng, R.H.: DriverGuard: A fine-grained protection on I/O flows. In: Atluri, V., Diaz, C. (eds.) ESORICS 2011. LNCS, vol. 6879, pp. 227-244. Springer, Heidelberg (2011)
4. Enck, W., McDaniel, P., Jaeger, T.: Pinup: Pinning user files to known applications. In: Proc. ACSAC (2008)
5. Gajek, S., Löhr, H., Sadeghi, A., Winandy, M.: Truwallet: trustworthy and migratable wallet-based web authentication. In: Proc. ACM STC (2009)
6. Hofmann, O.S., Kim, S., Dunn, A.M., Lee, M.Z., Witchel, E.: Inktag: secure applications on an untrusted operating system. In: Proc. ASPLOS (2013)
7. HP. Enterprise Secure Key Manager, http://h18006.www1.hp.com/products/ quickspecs/13978-div/13978-div.PDF
8. IBM. Tivoli Key Lifecycle Manager, http://www-01.ibm.com/software/tivoli/ products/key-lifecycle-mgr
9. Intel. Intel trusted execution techonology. No. 315168-008 (2011)
10. Kostiainen, K.: On-board Credentials: An Open Credential Platform for Mobile Devices. PhD thesis, Aalto University (2012)
11. Matrosov, A., Rodionov, E., Harley, D., Malch, J.: Stuxnet Under the Microscope, http://www.eset.com/us/resources/white-papers/Stuxnet-Under-the- Microscope.pdf
12. McCune, J., Li, Y., Qu, N., Zhou, Z., Datta, A., Gligor, V., Perrig, A.: TrustVisor: Efficient TCB reduction and attestation. In: Proc. IEEE Symp. on Security and Privacy (2010)
13. McCune, J.M., Parno, B., Perrig, A., Reiter, M.K., Isozaki, H.: Flicker: An execution infrastructure for TCB minimization. In: Proc. EuroSys (2008)
14. Oracle. Opensolaris project: Crypto kms agent toolkit, http://hub.opensolaris.org/bin/view/Project+kmsagenttoolkit/WebHome
15. Oracle. Oracle Key Manager, http://www.oracle.com/us/products/servers- storage/storage/tape-storage/034335.pdf
16. Parno, B., Lorch, J.R., Douceur, J.R., Mickens, J., McCune, J.M.: Memoir: Practical state continuity for protected modules. In: Proc. IEEE Symp. on Security and Privacy (2011)
17. RSA. RSA Data Protection Manager, http://www.emc.com/security/rsa-data- protection-manager.html
18. SafeNet. SafeNet hardware security modules, http://www.safenet-inc.com/ products/data-protection/hardware-security-modules-hsms/
19. StrongAuth. StrongKey SKMS, http://www.strongkey.org
20. Thales. Thales hardware security modules, http://www.thales-esecurity. com/en/Products/Hardware%20Security%20Modules.aspx
21. Trusted Computing Group. TPM specification version 1.2 (2009)
22. Trusted Computing Group. Trusted platform module library family "2.0" (2011)
23. VASCO. Diginotar reports security incident (2011), http://www.vasco.com/ company/about-vasco/press-room/news-archive/2011/news-diginotar-reports- security-incident.aspx
24. Zhang, F., Chen, J., Chen, H., Zang, B.: Cloudvisor: retrofitting protection of virtual machines in multi-tenant cloud with nested virtualization. In: Proc. ACM SOSP (2011)
25. Zhou, Z., Gligor, V., Newsome, J., McCune, J.: Building verifiable trusted path on commodity x86 computers. In: Proc. IEEE Symp. on Security and Privacy (2012)