Open-Source Applications of TCPA Hardware (2004)
Cached
Download Links
- [www.acsac.org]
- [cmc.cs.dartmouth.edu]
- [cmc.cs.dartmouth.edu]
- [www.cs.dartmouth.edu]
- [www.cs.dartmouth.edu]
- DBLP
Other Repositories/Bibliography
| Venue: | In Applied Computer Security Applications Conference |
| Citations: | 31 - 4 self |
BibTeX
@INPROCEEDINGS{Marchesini04open-sourceapplications,
author = {John Marchesini and Sean W. Smith and Omen Wild and Josh Stabiner and Alex Barsamian},
title = {Open-Source Applications of TCPA Hardware},
booktitle = {In Applied Computer Security Applications Conference},
year = {2004},
pages = {294--303}
}
Years of Citing Articles
Bookmark
 |
 |
 |
 |
 |
 |
OpenURL
Abstract
How can Alice trust computation occurring at Bob’s computer? Since it exists and is becoming ubiquitous, the current-generation TCPA/TCG hardware might enable a solution. When we started investigating this technology, the specification of the TCG software stack was not publicly available, and an implementation is still not; so, we designed and built an open-source platform based on Linux and commercially available TCPA/TCG hardware which would allow us to address the problem of trusting computation. Within the limits of TCPA/TCG hardware security, our solution balances what Alice needs to do to make trust judgments against what Bob needs to do to keep his system running. Furthermore, we describe how we use our platform to harden three sample open-source applications: Apache SSL Web servers, OpenCA certification authorities, and (with SELinux) compartmented attestation to balance privacy with DRM. To our knowledge, our project remains the only opensource TCPA/TCG platform in existence, and is also enabling trusted computing applications developed by our user community (enforcer.sourceforge.net reports over 1100 sourcecode downloads so far). 1.
