Loading [MathJax]/jax/output/HTML-CSS/config.js
Spy: a method to secure clients for network services | IEEE Conference Publication | IEEE Xplore

Spy: a method to secure clients for network services

Publisher: IEEE

Abstract:

A fundamental problem in security is guaranteeing correct program behavior on an untrusted computer regardless of a user's actions. The problem appears in digital rights ...View more

Abstract:

A fundamental problem in security is guaranteeing correct program behavior on an untrusted computer regardless of a user's actions. The problem appears in digital rights management, secure boot, e-appliances, etc. All existing approaches are either partial or unreliable. Today, dependable security is necessary not only for e-commerce, but also to ensure that, under critical conditions of information warfare, remote clients behave predictably and securely, and cannot compromise the infrastructure. We prove that the problem of correct program execution is unsolvable without adoption of a trusted hardware platform. Since it is impractical to consider as trusted a complex computer system, we identify the minimal hardware support that enables a complete solution. We propose two simple hardware mechanisms which require minimal change to the currently popular PC architecture: (i) the use of a trusted "sealed" computing device, the "spy", and (ii) a hardware interrupt, called "two minute warning", which has the highest priority and has a pre-defined time difference from any subsequent interrupt. Finally, we incrementally build upon this minimal hardware support larger and more complex applications with guaranteed security. We call this construction the inverse security pyramid.
Date of Conference: 02-05 July 2002
Date Added to IEEE Xplore: 07 November 2002
Print ISBN:0-7695-1588-6
Publisher: IEEE
Conference Location: Vienna, Austria

References

References is not available for this document.