acTvSM: a dynamic virtualization platform for enforcement of application integrity

Authors:
Ronald Toegl;Martin Pirker;Michael Gissing
Affiliations:
Institute for Applied Information Processing and Communications (IAIK), Graz University of Technology, Graz, Austria;Institute for Applied Information Processing and Communications (IAIK), Graz University of Technology, Graz, Austria;Institute for Applied Information Processing and Communications (IAIK), Graz University of Technology, Graz, Austria
Venue:
INTRUST'10 Proceedings of the Second international conference on Trusted Systems
Year:
2010

Citing 29
Cited 4

Formal requirements for virtualizable third generation architectures

Communications of the ACM
Building the IBM 4758 Secure Coprocessor

Computer
A Trusted Open Platform

Computer
Take control of TCPA

Linux Journal
A secure and reliable bootstrap architecture

SP '97 Proceedings of the 1997 IEEE Symposium on Security and Privacy
Xen and the art of virtualization

SOSP '03 Proceedings of the nineteenth ACM symposium on Operating systems principles
Terra: a virtual machine-based platform for trusted computing

SOSP '03 Proceedings of the nineteenth ACM symposium on Operating systems principles
BIND: A Fine-Grained Attestation Service for Secure Distributed Systems

SP '05 Proceedings of the 2005 IEEE Symposium on Security and Privacy
Property-based attestation for computing platforms: caring about properties, not mechanisms

NSPW '04 Proceedings of the 2004 workshop on New security paradigms
Reincarnating PCs with portable SoulPads

Proceedings of the 3rd international conference on Mobile systems, applications, and services
A comparison of software and hardware techniques for x86 virtualization

Proceedings of the 12th international conference on Architectural support for programming languages and operating systems
Reducing TCB complexity for security-sensitive applications: three case studies

Proceedings of the 1st ACM SIGOPS/EuroSys European Conference on Computer Systems 2006
QEMU, a fast and portable dynamic translator

ATEC '05 Proceedings of the annual conference on USENIX Annual Technical Conference
Design and implementation of a TCG-based integrity measurement architecture

SSYM'04 Proceedings of the 13th conference on USENIX Security Symposium - Volume 13
vTPM: virtualizing the trusted platform module

USENIX-SS'06 Proceedings of the 15th conference on USENIX Security Symposium - Volume 15
Flicker: an execution infrastructure for tcb minimization

Proceedings of the 3rd ACM SIGOPS/EuroSys European Conference on Computer Systems 2008
OSLO: improving the security of trusted computing

SS'07 Proceedings of 16th USENIX Security Symposium on USENIX Security Symposium
Practical Techniques for Operating System Attestation

Trust '08 Proceedings of the 1st international conference on Trusted Computing and Trust in Information Technologies: Trusted Computing - Challenges and Applications
TOCTOU, Traps, and Trusted Computing

Trust '08 Proceedings of the 1st international conference on Trusted Computing and Trust in Information Technologies: Trusted Computing - Challenges and Applications
Secure Virtual Disk Images for Grid Computing

APTC '08 Proceedings of the 2008 Third Asia-Pacific Trusted Infrastructure Technologies Conference
Attestation: Evidence and Trust

ICICS '08 Proceedings of the 10th International Conference on Information and Communications Security
Dynamics of a Trusted Platform: A Building Block Approach

Dynamics of a Trusted Platform: A Building Block Approach
LaLa: a late launch application

Proceedings of the 2009 ACM workshop on Scalable trusted computing
Justifying Integrity Using a Virtual Machine Verifier

ACSAC '09 Proceedings of the 2009 Annual Computer Security Applications Conference
TrustVisor: Efficient TCB Reduction and Attestation

SP '10 Proceedings of the 2010 IEEE Symposium on Security and Privacy
Requirements for an integrity-protected hypervisor on the x86 hardware virtualized architecture

TRUST'10 Proceedings of the 3rd international conference on Trust and trustworthy computing
Dynamic enforcement of platform integrity

TRUST'10 Proceedings of the 3rd international conference on Trust and trustworthy computing
Trusted virtual domains – design, implementation and lessons learned

INTRUST'09 Proceedings of the First international conference on Trusted Systems
Trusted integrity measurement and reporting for virtualized platforms

INTRUST'09 Proceedings of the First international conference on Trusted Systems

Specification and Standardization of a Java Trusted Computing API

Software—Practice & Experience
Practical privacy preserving cloud resource-payment for constrained clients

PETS'12 Proceedings of the 12th international conference on Privacy Enhancing Technologies
Lightweight distributed heterogeneous attested android clouds

TRUST'12 Proceedings of the 5th international conference on Trust and Trustworthy Computing
Securing mobile agents for crisis management support

Proceedings of the seventh ACM workshop on Scalable trusted computing

Quantified Score

Hi-index	0.00

Visualization

Abstract

Modern PC platforms offer hardware-based virtualization and advanced Trusted Computing mechanisms. Hardware primitives allow the measuring and reporting of software configurations, the separation of application execution environments into isolated partitions and the dynamic switch into a trusted CPU mode. In this paper we present a practical system architecture which leverages hardware mechanisms found in mass-market off-the-shelf PCs to improve the security of commodity guest operating systems by enforcing the integrity of application images. We enable the platform administrator to freely and deterministically specify the configurations trusted. Furthermore, we describe a set of tools and operational procedures to allow flexible and dynamic configuration management and to guarantee the secure transition between trusted platform configurations. We present our prototype implementation which integrates well with established Linux distributions.