Logical attestation: an authorization architecture for trustworthy computing

No abstract is available for this paper.

• Publication year

  2011

• Venue

  Symposium on Operating Systems Principles

• Publication date

  2011-10-23

• Fields of study

  Computer Science

• Identifiers
  DOI 10.1145/2043556.2043580
• External record

  Open on Semantic Scholar

• Source metadata

  Semantic Scholar

• No claims are published for this paper.

• No concepts are published for this paper.

• The BirliX Security Architecture

  2013cited by this paper
• Nexus authorization logic (NAL): Design rationale and applications

  2011cited by this paper
• TrustVisor: Efficient TCB Reduction and Attestation

  2010cited by this paper
• Bootstrapping Trust in Commodity Computers

  2010cited by this paper
• seL4: formal verification of an OS kernel

  2009cited by this paper
• TrInc: Small Trusted Hardware for Large Distributed Systems

  2009cited by this paper
• Not-a-Bot: Improving Service Availability in the Face of Botnet Attacks

  2009cited by this paper
• Para-Virtualized TPM Sharing

  2008cited by this paper
• Device Driver Safety Through a Reference Validation Mechanism

  2008influential reference
• Wedge: Splitting Applications into Reduced-Privilege Compartments

  2008cited by this paper
• Variations in Access Control Logic

  2008influential reference
• Property-Based TPM Virtualization

  2008cited by this paper
• Flicker: an execution infrastructure for tcb minimization

  2008cited by this paper
• VPFS: building a virtual private file system with a small trusted computing base

  2008influential reference
• Attested append-only memory: making adversaries stick to their word

  2007cited by this paper
• Offline untrusted storage with immediate detection of forking and replay attacks

  2007cited by this paper
• Alpaca: extensible authorization for distributed services

  2007cited by this paper
• Securing BGP Using External Security Monitors

  2006cited by this paper
• Making information flow explicit in HiStar

  2006cited by this paper
• Virtual monotonic counters and count-limited objects using a TPM without a trusted OS

  2006cited by this paper
• vTPM: Virtualizing the Trusted Platform Module

  2006cited by this paper
• The Nizza secure-system architecture

  2005influential reference
• BIND: a fine-grained attestation service for secure distributed systems

  2005influential reference
• Labels and event processes in the asbestos operating system

  2005cited by this paper
• sHype : Secure Hypervisor Approach to Trusted Virtualized Systems

  2005cited by this paper
• Semantic remote attestation: a virtual machine directed approach to trusted computing

  2004cited by this paper
• Secure Untrusted Data Repository (SUNDR)

  2004cited by this paper
• SWATT: softWare-based attestation for embedded devices

  2004cited by this paper
• Design and Implementation of a TCG-based Integrity Measurement Architecture

  2004cited by this paper
• Computer Security in the Real World

  2004cited by this paper
• Peer-to-Peer Authentication with a Distributed Single Sign-On Service

  2004cited by this paper
• A Trusted Open Platform

  2003cited by this paper
• Implementing an untrusted operating system on trusted hardware

  2003cited by this paper
• Terra: a virtual machine-based platform for trusted computing

  2003cited by this paper
• Can you trust your computer

  2002cited by this paper
• Security architectures revisited

  2002influential reference
• The PERSEUS System Architecture

  2001influential reference
• Enforceable security policies

  2000cited by this paper
• How to build a trusted database system on untrusted storage

  2000cited by this paper
• Fast and secure distributed read-only file system

  2000cited by this paper
• IRM enforcement of Java stack inspection

  2000cited by this paper
• The Flask Security Architecture: System Support for Diverse Security Policies

  1999cited by this paper
• Design and implementation of a distributed virtual machine for networked computers

  1999cited by this paper
• Proof-carrying authentication

  1999influential reference
• EROS: a fast capability system

  1999influential reference
• The performance of μ-kernel-based systems

  1997cited by this paper
• A secure and reliable bootstrap architecture

  1997cited by this paper
• Java security: present and near future

  1997cited by this paper
• Plan 9 from Bell Labs

  1995cited by this paper
• Efficient software-based fault isolation

  1994cited by this paper
• Authentication in the Taos operating system

  1994influential reference
• Can you trust your computer

  1994cited by this paper
• A Certified Digital Signature

  1989cited by this paper
• The Digital Distributed System Security Architecture

  1989cited by this paper
• Protocols for Public Key Cryptosystems

  1980cited by this paper
• Programming semantics for multiprogrammed computations

  1966cited by this paper

• Efficient Auditing of Event-driven Web Applications

  2024cites this paper
• Sesame: Practical End-to-End Privacy Compliance with Policy Containers and Privacy Regions

  2024cites this paper
• Selfish mining attack in blockchain: a systematic literature review

  2024cites this paper
• Charlotte: Reformulating Blockchains into a Web of Composable Attested Data Structures for Cross-Domain Applications

  2023cites this paper
• Expressive Authorization Policies using Computation Principals

  2023cites this paper
• QKPT: Securing Your Private Keys in Cloud With Performance, Scalability and Transparency

  2023cites this paper
• Towards Interoperable Enclave Attestation: Learnings from Decades of Academic Work

  2022cites this paper
• Policy Transparency: Authorization Logic Meets General Transparency to Prove Software Supply Chain Integrity

  2022cites this paper
• IceClave: A Trusted Execution Environment for In-Storage Computing

  2021cites this paper
• Scooter & Sidecar: a domain-specific approach to writing secure database migrations

  2021cites this paper
• STORM: Refinement Types for Secure Web Applications

  2021cites this paper
• Chapter 11 Measured Principals and Gating Functions

  2021cites this paper
• Trustless IoT: A Logic-Driven Architecture for IoT Hubs

  2020cites this paper
• First-Order Logic for Flow-Limited Authorization

  2020cites this paper
• Cobra: Making Transactional Key-Value Stores Verifiably Serializable

  2020cites this paper
• Chapter 11 Measured Principals and Gating Functions

  2020cites this paper
• Serializability and Heterogeneous Trust from Two Phase Commit to Blockchains

  2019cites this paper
• Detecting Incorrect Behavior of Cloud Databases as an Outsider

  2019cites this paper
• Semantics for Secure Software

  2019cites this paper
• $LiveForen$ : Ensuring Live Forensic Integrity in the Cloud

  2019cites this paper
• Multitenant Access Control for Cloud-Aware Distributed Filesystems

  2019cites this paper
• Charlotte: Composable Authenticated Distributed Data Structures, Technical Report

  2019cites this paper
• H-Verifier: Verifying Confidential System State with Delegated Sandboxes

  2018cites this paper
• An Expressive, Flexible and Uniform Logical Formalism for Attribute-based Access Control

  2018cites this paper
• Techniques to Protect Confidentiality and Integrity of Persistent and In-Memory Data

  2018influential citation
• Attestation-based Authorization for Stronger Security in the Cloud

  2018cites this paper
• Design, Implementation and Verification of Cloud Architecture for Monitoring a Virtual Machine's Security Health

  2018cites this paper
• Enabling Strong Database Integrity using Trusted Execution Environments

  2018cites this paper
• Implicit Remote Attestation for Microkernel-based Embedded Systems

  2018cites this paper
• Practical Third-Party Attestation for the Cloud

  2017cites this paper
• Practical Improvements to User Privacy in Cloud Applications

  2017cites this paper
• Certificate Linking and Caching for Logical Trust

  2017influential citation
• TapCon: Practical Third-Party Attestation for the Cloud

  2017influential citation
• Challenges For Scaling Applications Across Enclaves

  2017cites this paper
• The Efficient Server Audit Problem, Deduplicated Re-execution, and the Web

  2017cites this paper
• Trustworthy and Portable Emulation Platform for Digital Preservation

  2017cites this paper
• Towards a Science Base for Cybersecurity

  2016cites this paper
• PhotoProof: Cryptographic Image Authentication for Any Set of Permissible Transformations

  2016cites this paper
• Securing the 'Internet of Things': decentralised security for wireless networks of embedded systems

  2016cites this paper
• Remote attestation approach by cross-layer security policy translation

  2016cites this paper
• SAFE: A Declarative Trust-Agile System with Linked Credentials

  2016cites this paper
• Policy-Based Implicit Attestation for Microkernel-Based Virtualized Systems

  2016cites this paper
• A guideline for software architecture selection based on ISO 25010 quality related characteristics

  2016cites this paper
• Bootstrapping and maintaining trust in the cloud

  2016cites this paper
• Liquid information flow control

  2016cites this paper
• CQSTR: Securing Cross-Tenant Applications with Cloud Containers

  2016cites this paper
• Guardat: enforcing data policies at the storage layer

  2015cites this paper
• AdAttester: Secure Online Mobile Advertisement Attestation Using TrustZone

  2015cites this paper
• Floodgate: An Information Flow Control System to Prevent Data Leaks from Distributed Mobile Apps

  2015cites this paper
• An efficient authentication system of smart device using multi factors in mobile cloud service architecture

  2015cites this paper
• Protecting Data on Smartphones and Tablets from Memory Attacks

  2015cites this paper
• SAFE: A Declarative Trust Management System with Linked Credentials

  2015cites this paper
• fTPM: A Firmware-based TPM 2.0 Implementation

  2015cites this paper
• Secure Authorization for Federated Environments (SAFE) Overview and Progress Report 1

  2014cites this paper
• Ironclad Apps: End-to-End Security via Automated Full-System Verification

  2014cites this paper
• Leveraging Trusted Computing and Model Checking to Build Dependable Virtual Machines

  2014cites this paper
• cTPM: A Cloud TPM for Cross-Device Trusted Applications

  2014cites this paper
• Merlin: A Language for Provisioning Network Resources

  2014cites this paper
• Self-adaptive federated authorization infrastructures

  2014cites this paper
• The Miner's Dilemma

  2014cites this paper
• Shielding Applications from an Untrusted Cloud with Haven

  2014cites this paper
• Integrity Verification and Secure Loading of Remote Binaries for Microkernel-Based Runtime Environments

  2014cites this paper
• BatchFS: Scaling the File System Control Plane with Client-Funded Metadata Servers

  2014cites this paper
• An Architecture for Trusted PaaS Cloud Computing for Personal Data

  2014cites this paper
• Protecting Users by Confining JavaScript with COWL

  2014cites this paper
• Trust in a Principled Filesystem

  2014cites this paper
• cTPMTPM for Cross-Device Trusted Applications

  2014cites this paper
• cTPM A Cloud TPM for Cross-Device Trusted Applications

  2014cites this paper
• Belief semantics of authorization logic

  2013influential citation
• Lightweight Attestation and Secure Code Update for Multiple Separated Microkernel Tasks

  2013cites this paper
• Verifying cloud services: present and future

  2013cites this paper
• Enhanced Password Security on Mobile Devices

  2013cites this paper
• Building a trusted environment for security applications

  2013cites this paper
• Improving trust in cloud, enterprise, and mobile computing platforms

  2013cites this paper
• Optimizing Storage Performance for VM-Based Mobile Computing

  2013cites this paper
• Protecting Outsourced Data Privacy with Lifelong Policy Carrying

  2013cites this paper
• Scalable Network Management with Merlin

  2013cites this paper
• Participatory networking: an API for application control of SDNs

  2013cites this paper
• Verifying security invariants in ExpressOS

  2013cites this paper
• Embassies: Radically Refactoring the Web

  2013cites this paper
• Trustworthy Knowledge Planes for Federated Distributed Systems

  2012cites this paper
• AIR FORCE RESEARCH LABORATORY INFORMATION DIRECTORATE A SECURE AND RELIABLE HIGH-PERFORMANCE FIELD PROGRAMMABLE GATE ARRAY FOR INFORMATION PROCESSING CORNELL UNIVERSITY MARCH 2012 FINALTECHNICAL REPORT

  2012cites this paper
• Pasture: Secure Offline Data Access Using Commodity Trusted Hardware

  2012cites this paper
• Hails: Protecting data privacy in untrusted web applications

  2012influential citation
• Verifying System Integrity by Proxy

  2012cites this paper
• Policy-Sealed Data: A New Abstraction for Building Trusted Cloud Services

  2012cites this paper
• Plug-n-trust: practical trusted sensing for mhealth

  2012cites this paper
• Costs of Security in the PFS File System

  2012cites this paper
• Enhancing the OS against Security Threats in System Administration

  2012cites this paper
• Self-service cloud computing

  2012cites this paper
• Authorization and trust in software systems

  2012influential citation
• SOSP: U: Alohomora: Practical End-to-End Privacy Compliance with Policy Containers and Privacy Regions

  year unknowncites this paper