检索结果-内蒙古大学图书馆

Remote attestation on legacy operating systems with trusted platform modules

SCIENCE OF COMPUTER PROGRAMMING 2008年第1-2期74卷 13-22页

作者： Schellekens, Dries Wyseur, Brecht Preneel, Bart Katholieke Univ Leuven Dept ESAT SCD COSIC B-3001 Heverlee Belgium

A lot of progress has been made to secure network communication, e.g., through the use of cryptographic algorithms. However, this offers only a partial solution as long as the communicating end points still suffer from security problems. A number or applications require remote verification of software executing on an untrusted platform. trusted computing solutions propose to solve this problem through software and hardware changes, typically a secure operating system and the addition of a secure coprocessor, respectively. On the other hand, timed execution of code checksum Calculations aims for a solution on legacy platforms, but can not provide strong security assurance. We present a mixed solution by using the trusted computing hardware, namely the time stamping functionality of the trusted platform module (TPM), in combination with a timing-based remote code integrity verification mechanism. In this way, the overall security of the timed execution scheme can be improved without requiring a secure operating system. (C) 2008 Elsevier B.V. All rights reserved.

关键词： Remote software authentication Attestation trusted platform module Timed execution

来源：评论

学校读者我要写书评

暂无评论

A remote attestation protocol with trusted platform modules (TPMs) in wireless sensor networks

引用

SECURITY AND COMMUNICATION NETWORKS 2015年第13期8卷 2171-2188页

作者： Tan, Hailun Hu, Wen Jha, Sanjay Univ New S Wales Sch Comp Sci Engn Sydney NSW 2052 Australia

Given the limited resources and computational power of current embedded sensor devices, memory protection is difficult to achieve and generally unavailable. Hence, the software run-time buffer overflow that is used by the worm attacks in the Internet could be easily exploited to inject malicious codes into wireless sensor networks (WSNs). As a result, the remote attestation on the application codes installed in WSNs is the first important step to detect any unauthorized changes through the buffer overflow attack. Previous software-based remote code verification approaches such as SoftWare-based ATTestation and Secure Code Update By Attestation have been shown difficult to deploy in recent work. In this paper, we propose and implement a remote attestation protocol for detecting unauthorized tampering in the application codes running on sensor nodes with the assistance of trusted platform modules (TPMs), a tiny, cost-effective and tamper-proof cryptographic micro-controller. In our design, each sensor node is equipped with a TPM, and the firmware running on the node could be verified by the other sensor nodes in a WSN, including the sink. Specifically, we present a hardware-based remote attestation protocol, discuss the potential attacks an adversary could launch against the protocol and provide comprehensive system performance results of the protocol in a multi-hop sensor network testbed. The experimental results demonstrated that our scheme is able to attest the application codes running in sensor node with small delay (less than 25s for single-hop), considerable network lifetime and reasonable communication and energy overhead. Copyright (c) 2015 John Wiley & Sons, Ltd.

关键词： remote attestation trusted platform module wireless sensor networks

来源：评论

学校读者我要写书评

暂无评论

Remote Attestation on Legacy Operating Systems With trusted platform modules

引用

ELECTRONIC NOTES IN THEORETICAL COMPUTER SCIENCE 2008年第1期197卷 59-72页

作者： Schellekens, Dries Wyseur, Brecht Preneel, Bart Katholieke Univ Leuven Dept ESAT SCD COSIC Kasteelpk Arenberg 10 B-3001 Heverlee Belgium

A lot of progress has been made to secure network communication, e.g., through the use of cryptographic algorithms. However, this offers only a partial solution as long as the communicating end points still suffer from security problems. A number of applications require remote verification of software executing on an untrusted platform. trusted computing solutions propose to solve this problem through software and hardware changes, typically a secure operating system and the addition of a secure coprocessor respectively. On the other hand, timed execution of code checksum calculations aims for a solution on legacy platforms, but can not provide strong security assurance. We present a mixed solution by using the trusted computing hardware, namely the time stamping functionality of the trusted platform module, in combination with a timing based remote code integrity verification mechanism. In this way, we do not require a secure operating system, but at the same time the overall security of the timed execution scheme can be improved.

关键词： remote software authentication attestation trusted platform module timed execution

来源：评论

学校读者我要写书评

暂无评论

Distributed Usage Control Enforcement through trusted platform modules and SGX Enclaves 18

Distributed Usage Control Enforcement through Trusted Platfo...

引用

23rd ACM Symposium on Access Control Models and Technologies (SACMAT)

作者： Wagner, Paul Georg Birnstill, Pascal Beyerer, Juergen Karlsruhe Inst Technol Karlsruhe Germany Fraunhofer IOSB Karlsruhe Germany

ISBN: (纸本)9781450356664

In the light of mobile and ubiquitous computing, sharing sensitive information across different computer systems has become an increasingly prominent practice. This development entails a demand of access control measures that can protect data even after it has been transferred to a remote computer system. In order to address this problem, sophisticated usage control models have been developed. These models include a client side reference monitor (CRM) that continuously enforces protection policies on foreign data. However, it is still unclear how such a CRM can be properly protected in a hostile environment. The user of the data on the client system can influence the client's state and has physical access to the system. Hence technical measures are required to protect the CRM on a system, which is legitimately used by potential attackers. Existing solutions utilize trusted platform modules (TPMs) to solve this problem by establishing an attestable trust anchor on the client. However, the resulting protocols have several drawbacks that make them infeasible for practical use. This work proposes a reference monitor implementation that establishes trust by using TPMs along with Intel SGX enclaves. First we show how SGX enclaves can realize a subset of the existing usage control requirements. Then we add a TPM to establish and protect a powerful enforcement component on the client. Ultimately this allows us to technically enforce usage control policies on an untrusted remote system.

关键词： Usage Control Access Control trusted Reference Monitor trusted platform module SGX Secure Remote Computation

来源：评论

学校读者我要写书评

暂无评论

TPM-Based Remote Attestation for Wireless Sensor Networks

引用

Tsinghua Science and Technology 2016年第3期21卷 312-321页

作者： Donglai Fu Xinguang Peng Software School of North University of China Taiyuan 030051China School of Computer Science&Technology Taiyuan University of TechnologyTaiyuan 030051China.

It is essential to design a protocol to allow sensor nodes to attest to their trustworthiness for mission- critical applications based on Wireless Sensor Networks （WSNs）. However, it is a challenge to evaluate the trustworthiness without appropriate hardware support. Hence, we present a hardware-based remote attestation protocol to tackle the problem within WSNs. In our design, each sensor node is equipped with a trusted platform module （TPM） which plays the role of a trusted anchor. We start with the formulation of remote attestation and its security. The complete protocol for both single-hop and multi-hop attestations is then demonstrated. Results show the new protocol is effective, efficient, and secure.

关键词： network security wireless sensor networks remote attestation trusted platform module

来源：评论

学校读者我要写书评

暂无评论

An Enhanced Direct Anonymous Attestation Scheme with Mutual Authentication for Network-Connected UAV Communication Systems

引用

China Communications 2018年第5期15卷 61-76页

作者： Liquan Chen Sijie Qian Ming Lim Shihui Wang School of Information Science and Engineering Southeast University Research Center of Supply Chain and Operations Management Coventry University

In network-connected UAV(NCUAV) communication systems, user authentication is replaced by platform identity authentication and integrity check because many NC-UAVs are operated without human intervention. Direct anonymous attestation(DAA) is an attractive cryptographic scheme that provides an elegant balance between platform authentication and anonymity. However, because of the low-level computing capability and limited transmission bandwidth in UAV, the existing DAA schemes are not suitable for NC-UAV communication systems. In this paper, we propose an enhanced DAA scheme with mutual authentication(MA-DAA scheme), which meets the security requirements of NC-UAV communication systems. The proposed MA-DAA scheme, which is based on asymmetric pairings, bundles the identities of trusted platform module(TPM) and Host to solve the malicious module changing attacks. Credential randomization, batch proof and verification, and mutual authentication are realized in the MA-DAA scheme. The computational workload in TPM and Host is reduced in order to meet the low computation and resource requirements in TPM and *** entire scheme and protocols are presented,and the security and efficiency of the proposed MA-DAA scheme are proved and *** experiment results also confirm the high efficiency of the proposed scheme.

关键词： network-connected UAV trusted computing direct anonymous attestation mutual authentication trusted platform module

来源：评论

学校读者我要写书评

暂无评论

LiveForen: Ensuring Live Forensic Integrity in the Cloud

引用

IEEE TRANSACTIONS ON INFORMATION FORENSICS AND SECURITY 2019年第10期14卷 2749-2764页

作者： Liu, Anyi Fu, Huirong Hong, Yuan Liu, Jigang Li, Yingjiu Oakland Univ Dept Comp Sci & Engn Rochester MI 48309 USA IIT Dept Comp Sci Chicago IL 60616 USA Metropolitan State Univ Dept Comp Sci & Cybersecur St Paul MN 55106 USA Singapore Management Univ Sch Informat Syst Singapore 188065 Singapore

To expedite the forensic investigation process in the cloud, excessive and yet volatile data need to be acquired, transmitted, and analyzed in a timely manner. A common assumption for most existing forensic systems is that credible data can always be collected from a cloud infrastructure, which might be susceptible to various exploits. In this paper, we present the design, implementation, and evaluation of LiveForen, a system that enforces a trustworthy forensic data acquisition and transmission process in the cloud, whose computer platforms' integrity has been verified. To fulfill this objective, we propose two secure protocols that verify the fingerprints of the computer platforms, as well as the attributes of the human agents, by taking advantage of the trusted platform module and the attribute-based encryption. To transmit forensic data as a data stream and verify its integrity at the same time, a unique fragile watermark is embedded into the data stream without altering the data itself. The watermark allows not only the data integrity to be verified but also any malicious data manipulation to be localized, with minimum communication overhead. The experimental results demonstrate that LiveForen achieves good scalability and limited performance overhead for authentication, data transmission, and integrity verification in an Infrastructure-as-a-Service cloud environment.

关键词： Cybersecurity cybercrime trusted computing trusted platform module attribute-based encryption fragile watermark

来源：评论

学校读者我要写书评

暂无评论

Smaug: A TEE-Assisted Secured SQLite for Embedded Systems

引用

IEEE TRANSACTIONS ON DEPENDABLE AND SECURE COMPUTING 2023年第5期20卷 3617-3635页

作者： Lu, Di Shi, Minqiang Ma, Xindi Liu, Ximeng Guo, Rui Zheng, Tianfang Shen, Yulong Dong, Xuewen Ma, Jianfeng Xidian Univ Sch Comp Sci & Technol Xian 710071 Shaanxi Peoples R China Xidian Univ Sch Cyber Engn Xian 710071 Shaanxi Peoples R China Guilin Univ Elect Technol Guangxi Key Lab Trusted Software Guilin 541004 Guangxi Peoples R China Fuzhou Univ Coll Comp & Data Sci Fuzhou 350025 Fujian Peoples R China

As one of the most popular relational databases for embedded devices, SQLite is lightweight to be embedded into applications without installing a specific database management system. However, simplicity and easy-to-use are double-edged swords;while bringing convenience, they also make data processing and storage risky. For example, an attacker can obtain data from a database file or memory and tamper with it once he has gained higher privileges, threatening the database's confidentiality and integrity. To address such security issues, based on a trusted execution environment (TEE) and a trusted platform module (TPM), we have proposed Smaug, a general secure scheme to ensure the confidentiality and integrity of SQLite and similar databases. With Smaug, all the critical data is stored in ciphertext, and data integrity protection is also provided. Besides, with TEE, all the sensitive operations are isolated from the untrusted environment, which can effectively resist attacks against memory. In addition, we use TPM to provide a solid root-of-trust (RoT) for the system. Finally, we have implemented a prototype system, and the performance evaluations have clarified the dominant factors that affect the system availability, providing a reference to the design and implementation of similar systems.

关键词： trusted execution environment trusted platform module trustzone encrypted database data integrity key management

来源：评论

学校读者我要写书评

暂无评论

A trust enhancement scheme for cluster-based wireless sensor networks

引用

JOURNAL OF SUPERCOMPUTING 2019年第5期75卷 2761-2788页

作者： Wang, Tianshu Hu, Kongfa Xichen Yang Gongxuan, Zhang Wang, Yongli Nanjing Univ Chinese Med Sch Informat Technol Nanjing Jiangsu Peoples R China Nanjing Normal Univ Sch Comp Sci & Technol Nanjing Jiangsu Peoples R China Nanjing Univ Sci & Technol Sch Comp Sci & Engn Nanjing Jiangsu Peoples R China

Security is crucial in wireless sensor networks (WSNs) since a growing variety of applications require strict security. Cluster-based architecture has an enhancement in the system performance of WSNs. This article presents a trust enhancement scheme for cluster-based WSNs, where network time is divided into multiple rounds. Each round contains a setup phase and a steady-state phase. In the setup phase, clusters are formed and mutual trusted relationships between cluster nodes are established through two proposed authentication protocols called SET-TESLA (Setup TESLA) and SET-SCHNORR (Setup SCHNORR). SET-TESLA uses the authenticated broadcast TESLA scheme and reduces the iterations of hash function to improve the energy efficiency, while SET-SCHNORR applies a lightweight signature SCHNORR scheme. In the steady-state phase, collected environmental or physical data are transmitted through the proposed STEADY-TESLA protocol (Steady-state TESLA), which guarantees the data credibility. The analysis demonstrates that the security scheme does well in resisting such attacks as data confidentiality attacks, data integrity attacks and compromise node attacks. In addition, the results of calculations and simulations show that the proposed scheme performs better than the existing security protocols in terms of communication overhead and energy consumption.

关键词： WSNs Trust enhancement Authentication protocol trusted platform module Network life cycle

来源：评论

学校读者我要写书评

暂无评论

Design and Implementation of Mobile trusted module for trusted Mobile Computing

引用

IEEE TRANSACTIONS ON CONSUMER ELECTRONICS 2010年第1期56卷 134-140页

作者： Kim, Mooseop Ju, Hongil Kim, Youngsae Park, Jiman Park, Youngsoo Elect & Telecommun Res Inst Taejon 305700 South Korea

This paper presents the design and implementation of a Mobile trusted module (MTM) which should satisfy small area and low-power condition. Unlike the general trusted platform module (TPM) for PCs, the MTM, that is to be employed in mobile devices, has very stringent limitations with respect to available power, circuit area and so on. Therefore, a MTM needs the spatially-optimized architecture and design method. We introduce the requirements for a MTM design and then implement a compact and power efficient MTM chip based-on the introduced requirements. The designed MTM can support all the necessary functions for trusted mobile platforms. The MTM chip covers 400K logic gates and consumes at most 10mA(1).

关键词： trusted Computing Mobile Computing Mobile trusted module trusted platform module

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：