Citation Context

...iderable effort, but in the end, the project failed, and the kernel was never deployed. This failure was due, in part, to the absence of support for Ethernet – a feature considered critical by the time the kernel was completed, but not anticipated when it was initially designed [12]. Rather than building secure systems from scratch, we argue that we can resolve the tension between security and features by extending the trust a user has in one device to enable her to securely use another commodity device or service, without sacrificing the performance and features expected of commodity systems [22]. Note that we concentrate on average users and commodity systems, rather than on advanced users, special-purpose computers, or highly constrained environments (such as those found within the military). At a high level, we support this premise by developing techniques to allow a user to employ a small, trusted, portable device to securely learn what code is executing on her local computer. Rather than entrusting her data to the mountain of buggy code likely running on her computer, we construct an on-demand secure execution environment which can perform security-sensitive tasks and handle priv...

Citation Context

...ot accessible (only used in the TPM) [28]. A TPM enables building trustworthy computing relationships. For instance, it can be used to prevent tampering software through exploiting the chain of trust =-=[22]-=-. Montero et al. [13] propose a technique for enforcing confidentiality protection during dissemination of sensitive data (such as digital identities) using sticky policies. Sticky policies are polici...