Bump in the Ether: A framework for securing sensitive user input

USENIX 2006 Annual Technical Conference

Volumn , Issue , 2006, Pages 185-198

  McCune, Jonathan M ^a   Perrig, Adrian ^a   Reiter, Michael K ^a  

^a CARNEGIE MELLON UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

DISPLAY DEVICES; ETHERS; MALWARE;

DESIGN AND IMPLEMENTATIONS; INPUT DEVICES; USABILITY AND SECURITY; USER INPUT; USER SPACES;

MOBILE SECURITY;

EID: 85077302433     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (41)

1. D. Balfanz and E. W. Felten. Hand-held computers can be better smart cards. In Proccedings of the USENIX Security Symposium, August 1999.
2. D. Balfanz, D.K. Smetters, P. Stewart, and H. C. Wong. Talking to strangers: Authentication in ad-hoc wireless networks. In Proceedings of the Symposium on Network and Distributed Systems Security, February 2002.
3. M. Bellare, R. Canetti, and H. Krawczyk. Keyed hash functions and message authentication. In Proceedings of Crypto, pages 1–15, 1996.
4. M. Bellare, T. Kohno, and C. Namprempre. SSH transport layer encryption modes. Internet draft, August 2005.
5. J. L. Berger, J. Picciotto, J. P. L. Woodward, and P. T. Cummings. Compartmented mode workstation: Prototype highlights. Software Engineering, 16(6):608–618, June 1990.
6. M. Carson and J. Cugini. An X11-based Multilevel Window System architecture. In Proceedings of the EUUG Technical Conference, 1990.
7. J. Chow, B. Pfaff, T. Garfinkel, K. Christopher, and M. Rosenblum. Understanding data lifetime via whole system simulation. In Proceedings of the USENIX Security Symposium, August 2004.
8. J. Epstein. A prototype for Trusted X labeling policies. In Proceedings of the Sixth Annual Computer Security Applications Conference, December 1990.
9. J. Epstein and J. Picciotto. Issues in building Trusted X Window Systems. The X Resource, 1(1), Fall 1991.
10. J. Epstein and J. Picciotto. Trusting X: Issues in building Trusted X window systems -or- what’s not trusted about X? In Proceedings of the 14th Annual National Computer Security Conference, October 1991.
11. G. Faden. Reconciling CMW requirements with those of X11 applications. In Proceedings of the 14th Annual National Computer Security Conference, October 1991.
12. A. O. Freier, P. Karlton, and P. C. Kocher. The SSL protocol: Version 3.0. Internet draft, Netscape Communications, November 1996.
13. T. Garfinkel, B. Pfaff, J. Chow, and M. Rosenblum. Data lifetime is a systems problem. In Proceedings of the ACM SIGOPS European Workshop, September 2004.
14. P. Jones. RFC 3174: US secure hash algorithm 1 (SHA1), September 2001.
15. N. Leavitt. Will proposed standard make mobile phones more secure? IEEE Computer, 38(12):20–22, 2005.
16. J. M. McCune, A. Perrig, and M. K. Reiter. Seeing-is-Believing: Using camera phones for human-verifiable authentication. In Proceedings of the IEEE Symposium on Security and Privacy, May 2005.
17. A. J. Menezes, P. C. van Oorschot, and S. A. Vanstone. Handbook of Applied Cryptography. CRC Press Series on Discrete Mathematics and its Applications. CRC Press, 1997.
18. Microsoft Corporation. Next generation secure computing base. http://www.microsoft.com/resources/ngscb/, April 2006.
19. Sun Microsystems. Mobile information device profile (MIDP) version 2.0, April 2006.
20. B. A. Myers. Using handhelds and PCs together. Communications of the ACM, 44(11), November 2001.
21. J. Picciotto. Towards trusted cut and paste in the X Window System. In Proceedings of the Seventh Annual Computer Security Applications Conference, December 1991.
22. J. Picciotto and J. Epstein. A comparison of Trusted X security policies, architectures, and interoperability. In Proceedings of the Eighth Annual Computer Security Applications Conference, December 1992.
23. T. Richardson, Q. Stafford-Fraser, K. R. Wood, and A. Hopper. Virtual network computing. IEEE Internet Computing, 2(1):33–38, 1998.
24. D. S. H. Rosenthal. LInX—a Less INsecure X server (Sun Microsystems unpublished draft).
25. S. J. Ross, J. L. Hill, M. Y. Chen, A. D. Joseph, D. E. Culler, and E. A. Brewer. A composable framework for secure multi-modal access to Internet services from post-PC devices. Mobile Network Applications, 7(5):389–406, 2002.
26. R. Sailer, X. Zhang, T. Jaeger, and L. van Doorn. Design and implementation of a TCG-based integrity measurement architecture. In Proceedings of the USENIX Security Symposium, 2004.
27. J. Scott-Joynt. The enemy within. BBC News, Available at: http://news.bbc.co.uk/2/hi/business/4510561.stm, May 2005.
28. A. Seshadri, M. Luk, E. Shi, A. Perrig, L. van Doorn, and P. Khosla. Pioneer: Verifying integrity and guaranteeing execution of code on legacy platforms. In Proceedings of ACM Symposium on Operating Systems Principles, October 2005.
29. J. S. Shapiro, J. Vanderburgh, E. Northup, and D. Chizmadia. Design of the EROS trusted window system. In Proceedings of the USENIX Security Symposium, 2004.
30. R. Sharp, A. Madhavapeddy, R. Want, T. Pering, and J. Light. Fighting crimeware: An architecture for split-trust web applications. Technical Report to appear, Intel Research Center, 2006.
31. R. Sharp, J. Scott, and A. Beresford. Secure mobile computing via public terminals. In Proceedings of the International Conference on Pervasive Computing, May 2006.
32. E. Shi, A. Perrig, and L. van Doorn. BIND: A time-of-use attestation service for secure distributed systems. In Proceedings of IEEE Symposium on Security and Privacy, May 2005.
33. D. X. Song, D. Wagner, and X. Tian. Timing analysis of keystrokes and timing attacks on SSH. In Proceedings of the USENIX Security Symposium, 2001.
34. F. Stajano and R. Anderson. The resurrecting duckling: Security issues for ad-hoc wireless networks. In Proceedings of the Security Protocols Workshop, 1999.
35. J. T. Trostle. Timing attacks against trusted path. In Proceedings of the IEEE Symposium on Security and Privacy, May 1998.
36. Trusted Computing Group. Security in mobile phones whitepaper, October 2003.
37. Trusted Computing Group. Trusted platform module main specification, Part 1: Design principles, Part 2: TPM structures, Part 3: Commands, October 2003. Version 1.2, Revision 62.
38. J. P. L. Woodward. Security requirements for system high and compartmented mode workstations. Technical Report MTR 9992, Rev. 1, The MITRE Corporation, November 1987.
39. The XFree86 project, Inc. http://www.xfree86.org/, April 2006.
40. The X.Org foundation. http://www.x.org/, April 2006.
41. L. Zhuang, F. Zhou, and J. D. Tygar. Keyboard acoustic emanations revisited. In Proceedings of the ACM Conference on Computer and Communications Security, October 2005.