Abstract
With the majority of security breaches coming from inside of organizations, and with the number of public computing sites, where users do not know the system administrators, increasing, it is dangerous to blindly trust system administrators to manage computers appropriately. However, most current security systems are vulnerable to malicious software modification by administrators. To solve this problem, we have developed a system called sAEGIS, which embraces a smartcard as personal secure storage for computer component hashes, and uses the hashes in a secure booting process to ensure the integrity of the computer components.
This is a preview of subscription content, log in via an institution to check access.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
Preview
Unable to display preview. Download preview PDF.
Similar content being viewed by others
References
Rootkit homepage. http://www.rootkit.com/.
William A. Arbaugh. Chaining Layered Integrity Checks. PhD thesis, University of Pennsylvania, 1999.
William A. Arbaugh, David J. Farber, and Jonathan M. Smith. A secure and reliable bootstrap architecture. In 1997 IEEE Symposium on Security and Privacy, Oakland, CA, May 1997.
S. M. Bellovin and M. Merritt. Limitations of the Kerberos authentication system. In Proceedings of the Winter 1991 Usenix Conference, January 1991. ftp://research.att.com/dist/internet_security/kerblimit.usenix.ps.
Eric Brewer, Paul Gauthier, Ian Goldberg, and David Wagner. Basic flaws in internet security and commerce, 1995. http://www.ao.net/netnigga/endpointsecurity.html.
A. Dearle, R. di, J. Farrow, F. Henskens, D. Hulse, A. Lindstrm, S. Norris, J. Rosenberg, and F. Vaughan. Protection in the grasshopper operating system, 1994.
Dorothy Denning. Cryptography and Data Security. Addison-Wesley, 1983.
Free Software Foundation. Gnu grub, 1999. http://www.gnu.org/software/grub/grub.html.
Ian Goldberg, David Wagner, Randi Thomas, and Eric Brewer. A secure environment for untrusted helper applications. In Proceedings of 6th USENIX Unix Security Symposium, July 1996.
halflife. Bypassing integrity checking systems. Phrack Magazine, September 1997. Volume 7, Issue 51, Article 9 of 17.
Peter Hazen. Flash memory boot block architecture for safe firmware updates. Technical Report AB-57, Intel, 1995. http://developer.intel.com/design/flcomp/applnots/292130.htm.
Gene H. Kim and Eugene H. Spafford. The design and implementation of tripwire: A file system integrity checker. Technical report, Purdue University, 1995. CSDTR-93-071.
Paul Kocher, Joshua Jaffe, and Benjamin Jun. Introduction to differential power analysis and related attacks. Cryptography Research, 1998. http://www.cryptography.com/dpa/technical/index.html.
Oliver Kommerling and Markus G. Kuhn. Design principles for tamper-resistant smartcard processors. In Proceedings of USENIX Workshop on Smartcard Technology, Chicago, May 1999.
Linux bios. http://www.acl.lanl.gov/linuxbios/.
Peter A. Loscocco, Stephen D. Smalley, Patrick A. Muckelbauer, Ruth C. Taylor, S. Jeff Turner, and John F. Farrell. The inevitability of failure: The flawed assumption of security in modern computing environments. In 21st National Information Systems Security Conference, Crystal City, Virginia, October 1998. National Security Agency, NISSC. http://www.jya.com/paperF1.htm.
H. Nag, R. Gotfried, D. Greenberg, C. Kim, B. Maccabe, T. Stallcup, G. Ladd, L. Shuler, S. Wheat, and D. van Dresser. Prose: Parallel real-time operating system for secure environments, 1996.
Peter G. Neumann. Architectures and formal representations for secure systems, 1996. Technical Report SRI-CSL-96-05, Computer Science Laboratory, SRI International.
Department of Defense. Trusted computer system evaluation criteria, December 1985. http://www.radium.ncsc.mil/tpep/library/rainbow/5200.28-STD.html.
Openbios. http://www.freiburg.linux.de/OpenBIOS/.
Jim Rees. Iso 7816 library, 1997. http://www.citi.umich.edu/projects/sinciti/smartcard/sc7816.html.
Spyrus. http://www.spyrus.com/.
R. Wahbe, S. Lucco, T. Anderson, and S. Graham. client software-based fault isolation, 1993.
Author information
Authors and Affiliations
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2001 Springer-Verlag Berlin Heidelberg
About this paper
Cite this paper
Itoi, N., Arbaugh, W.A., Pollack, S.J., Reeves, D.M. (2001). Personal Secure Booting. In: Varadharajan, V., Mu, Y. (eds) Information Security and Privacy. ACISP 2001. Lecture Notes in Computer Science, vol 2119. Springer, Berlin, Heidelberg. https://doi.org/10.1007/3-540-47719-5_12
Download citation
DOI: https://doi.org/10.1007/3-540-47719-5_12
Published:
Publisher Name: Springer, Berlin, Heidelberg
Print ISBN: 978-3-540-42300-3
Online ISBN: 978-3-540-47719-8
eBook Packages: Springer Book Archive