Trust and Trustworthy Computing

Name: Trust and Trustworthy Computing | 5th International Conference, TRUST 2012, Vienna, Austria, June 13-15, 2012, Proceedings
Brand: Springer
Price: 53.49 EUR
Availability: OnlineOnly

5th International Conference, TRUST 2012, Vienna, Austria, June 13-15, 2012, Proceedings

Stefan Katzenbeisser Edgar Weippl L. Jean Camp Melanie Volkamer Mike Reiter Xinwen Zhang(Herausgeber*in)

Springer (Verlag)

Erschienen am 9. Juni 2012

XII, 341 Seiten

E-Book

PDF mit Wasserzeichen-DRM

Systemvoraussetzungen

978-3-642-30921-2 (ISBN)

53,49 €inkl. 7% MwSt.

Systemvoraussetzungen

für PDF mit Wasserzeichen-DRM

E-Book Einzellizenz

Als Download verfügbar

Beschreibung

Weitere Details

Weitere Ausgaben

Inhalt

Title
Preface
Organization
Table of Contents
Technical Strand
Authenticated Encryption Primitives for Size-Constrained Trusted Computing
Introduction
Motivation and System Models
Assumptions and Requirements
Proof of Security
Technique
Analysis
Implementation Pitfalls
Security for the External User
Mapping of Memory Locations
Reference Implementation
Related Work
Interpretation and Proposal
Conclusion
References
Auditable Envelopes: Tracking Anonymity Revocation Using Trusted Computing
Introduction
Related Work
Motivation and Contribution
Structure
Background: Trusted Computing
Physical and Virtual Monotonic Counters
Trust Model
Protocol
Implementation Steps
Applicability
When Does Alice Request a Pseudonym?
Digital Cash Examples
Electronic Voting Example
Analysis
Conclusions and Future Work
References
Lockdown: Towards a Safe and Practical Architecture for Security Applications on Commodity Platforms
Introduction
Problem Definition
Lockdown's Architecture
Hyper-partitioning
Trusted Environment Protection
External Verification and Trusted Path
Security Analysis
Other Attacks
Implementation
Hyper-partitioning
Protecting the Trusted Environment
External Verification and Trusted Path
Evaluation
Trusted Computing Base (TCB)
Performance Measurements
Related Work
Conclusion
References
Experimenting with Fast Private Set Intersection
Introduction
The DT10-v4 PSI Protocol
Notation
Protocol Specification
Precomputation
Implementing DT10-v4
Important Design Choices
Prototype Implementation
Additional Performance-Optimizing Techniques
Performance Evaluation
Protocol Total Running Time
Micro-benchmarking
Comparison to NDSS12
Performance Comparison
The Choice of Protocols from FC10
Evaluation Criteria
Conclusion
References
Reliable Device Sharing Mechanisms for Dual-OS Embedded Trusted Computing
Introduction
Background
SafeG: A Dual-OS System Based on ARM TrustZone
Motivational Example
Reliable Device Sharing
Requirements and Assumptions
Suitability of Existing Device Sharing Approaches
Reliable Device Sharing through Re-partitioning
Pure Re-partitioning
Hybrid Re-partitioning
Implementation
Evaluation
Overhead
Device Latency
Code Modifications
Related Work
Conclusions and Future Work
References
Modelling User-Centered-Trust (UCT) in Software Systems: Interplay of Trust, Affect and Acceptance Model
Introduction
Concept of Trust
Trust as Belief, Attitude, Intention and Psychological State
Confusion about Trust and Trustworthiness
Anomalies in Trust Measures
TAM: Technology Acceptance Model
Trust and TAM
Trust in Technology vs. Trust in People
Trust in Software Systems
Trust in ISO Definition
Trust in Software Development Process
Trustworthy Software
User-Centered-Trust (UCT) in Software Systems
Conceptualization of Trust in Software Systems
Proposition 1: Attitude, Acceptance and Affect
Proposition 2: Attitude, Trust and Affect
Proposition 3: Cognitive and Affective Attitude
Proposition 4: From Aesthetics to Emotions and Cognition
Proposition 4: Trust in Vendor
Conclusions, Limitations and Future Directions
References
Clockless Physical Unclonable Functions
Introduction
Contributions and Paper Organization
Asynchronous Logic
Asynchronous Rings
Bubbles and Tokens
Token and Bubble Propagation
ASYNCPUF
Results
Conclusions
References
Lightweight Distributed Heterogeneous Attested Android Clouds
Introduction
Security Enhanced Mass-Market Platforms
Trusted Platform Module
Trusted Execution Technology
ARM Platforms
Architecture
Cloud Node Properties
Entities
Core Operations
Implementation
x86 PC Platform
ARM Platform
Platform Security Survey
Trust Perimeter
Distributed Nodes
Node Diversity
Attack Surface
Open Source Cloud Node Platform
Future Trusted Platforms
Related Work
Outlook and Conclusion
References
Converse PUF-Based Authentication
Introduction
Contributions
Outline
Background and Related Work
Converse PUF-Based Authentication
Protocol Description
Correctness of the Protocol
Authenticated Key Exchange
Security Model and Analysis
Instantiation of the Protocol
Conclusion
References
Trustworthy Execution on Mobile Devices: What Security Properties Can My Mobile Platform Give Me?
Introduction
Demand for Applications Requiring Hardware Security
Desired Security Features
Available Hardware Primitives
Isolated Execution
Secure Storage
Remote Attestation
Secure Provisioning
Trusted Path
Design Gaps and Challenges
Platform Case Studies
Isolated Execution Environments
Parallel Isolated Execution
Hypervisors
API Architectures
Analysis and Recommendations
References
Verifying System Integrity by Proxy
Introduction
Remote Integrity Verification
Integrity Verification Overview
Integrity Monitoring Challenges
Integrity Verification Proxy
Design Goals
Assumptions
Architecture Overview
Verifying the IVP Platform
Channel Mediation
Integrity Monitoring
Measurement Modules
Implementing an IVP
Verifying the Host
Channel Mediator
Integrity Monitor
Evaluation
Functionality
Performance
Related Work
Conclusion
References
Virtualization Based Password Protection against Malware in Untrusted Operating Systems
Introduction
Related Work
Overview
Design Criteria
Design Rationale
The Architecture
The Design Details
User-Hypervisor Interaction
Keystroke Interception
Handling SSL Session
Security Analysis
Implementation
KGuard in the Hypervisor
Browser Extension and Plugin
Hypercall Support in the HVM
Performance Evaluation
Overhead for Password Input
Overhead for Password Submission
Discussions
Hypervisor Security
Trusted Certificate Updates
Sensitive Keyboard Input Protection
Conclusion
References
SmartTokens: Delegable Access Control with NFC-Enabled Smartphones
Introduction
Multi-level Security Architecture
Model and Requirement Analysis
Generic Security Architecture
Architecture Instantiation
SmartTokenSystem
Overview
Notation and Preliminaries
Protocol Specification
Security Analysis
SmartTokens Reference Implementation
Instantiation of the Multi-level Platform Security Architecture
Related Work
Conclusion and Future Work
References
A Belief Logic for Analyzing Security of Web Protocols
Introduction
Related Work
Overview of Logic of Authentication
Extending Belief Logic
Introducing New Concepts and Syntax
Implications of Forged Requests
Reasoning about Users, Actions and Secrets
Analysis of SAML Identity Linking Protocol
Protocol Description
Modeling and Analysis
Fixing Identity Linking
Analysis of OAuth Protocol
Protocol Description
Modeling and Analysis
Fixing OAuth Protocol
Conclusions
References
Provenance-Based Model for Verifying Trust-Properties
Introduction
Virtual Platforms for Trust Domains
Related Work
Trust Properties and Evidence
Trust Properties
Evidence Classification
Graph-Based Representation
A Summary of OPM Semantics
Program Execution
Program Configuration
Integrity Measurement
Communication
Assertion Model
Reasoning about Trust-Properties
Evidence Validation
Property Specification and Verification
Verifying Virtual Appliances
Set-Up and Provenance Collection
Graph Representation
Verification
Discussion
Interoperability and Extensibility
Collecting and Securing the Evidence
Assumption on Infrastructure
Conclusions and Future Work
References
Socio-economic Strand
On the Practicality of Motion Based Keystroke Inference Attack
Introduction
Background
Motion Based Keystroke Inference Attack
Motion Sensor Data
Related Works
Methodology
Data Acquisition
Preprocessing
Classification
Evaluation
User Study
Finding
Motion Sensor Selection
Classification Techniques
Discussions
Inference Precision
Multiple Templates in DTW
Multi-class SVM
Conclusion
References
AndroidLeaks: Automatically Detecting Potential Privacy Leaks in Android Applications on a Large Scale
Introduction
Background
Threat Model
Methodology
Permission Mapping
Android Leaks
Evaluation
Potential Privacy Leaks Found
Miscellaneous Findings
Limitations
Related Work
Conclusion
References
Why Trust Seals Don't Work: A Study of User Perceptions and Behavior
Introduction
Background
E-Commerce and Trust
How Attackers Exploit Trust
Trust Signaling
Trust Symptoms - User Trust Assessment Heuristics
Trust Seals
Public Awareness Campaigns
Summary
Experiment
Aim
Method
Results
Effectiveness of Trust Seals
Factors Affecting Trust in Websites
Discussion
Trust Seals Are Not Effective
Trust Assessment Heuristics and Consumer Awareness
Conclusions
What Needs to Be Done
Research Limitations
References
Launching the New Profile on Facebook: Understanding the Triggers and Outcomes of Users' Privacy Concerns
Introduction
Conceptual Background
Methodology
Research Context
Data Collection
Grounded Theory Approach
Findings
First Stage: Emergence of a Privacy Problem
Second Stage: Outcomes of a Privacy Problem
Discussion
Limitations and Conclusion
References
Author Index

Systemvoraussetzungen

Als PDF speichern Als Link merken