Trusted distribution of software over the Internet

  • Authors:
  • A. D. Rubin

  • Affiliations:
  • -

  • Venue:
  • SNDSS '95 Proceedings of the 1995 Symposium on Network and Distributed System Security (SNDSS'95)
  • Year:
  • 1995

Quantified Score

Hi-index 0.00

Visualization

Abstract

The paper offers a solution to a problem of software distribution on the lnternet. The problem is that malicious software can be posted to the public with no accountability. When this software is run, it inherits the privileges of the user who runs it. Unfortunately, it is very common for users to execute software obtained on the Internet with no assurance that it is genuine. The solution offered here utilizes a trusted third party that signs certificates to identify the author of a program and to secure its integrity. A detailed design is provided. Finally, Bellcore's Trusted Software Integrity (Betsi) System, an implementation of the design, is presented.