Flicker: An Execution Infrastructure for TCB Minimization (2008)
| Venue: | PROCEEDINGS OF THE ACM EUROPEAN CONFERENCE ON COMPUTER SYSTEMS (EUROSYS) |
| Citations: | 57 - 14 self |
BibTeX
@MISC{McCune08flicker:an,
author = {Jonathan M. McCune and Bryan Parno and Adrian Perrig and Michael K. Reiter and Hiroshi Isozaki},
title = {Flicker: An Execution Infrastructure for TCB Minimization},
year = {2008}
}
Bookmark
 |
 |
 |
 |
 |
 |
OpenURL
Abstract
We present Flicker, an infrastructure for executing securitysensitive code in complete isolation while trusting as few as 250 lines of additional code. Flicker can also provide meaningful, fine-grained attestation of the code executed (as well as its inputs and outputs) to a remote party. Flicker guarantees these properties even if the BIOS, OS and DMAenabled devices are all malicious. Flicker leverages new commodity processors from AMD and Intel and does not require a new OS or VMM. We demonstrate a full implementation of Flicker on an AMD platform and describe our development environment for simplifying the construction of Flicker-enabled code.
