Flicker
Published 1 April 2008
Jonathan M. McCune, Bryan Parno, Adrian Perrig, Michael K. Reiter, Hiroshi Isozaki
Citations644
Generate an AI Snapshot to get a quick, structured summary of this paper.
Study Snapshot
ObjectiveStudy objective
MethodsResearch methodology
PopulationPopulation studied
Sample sizeSample sizes
OutcomesStudy outcomes here
ResultsStudy results comes here
LimitationsResearch study limitations comes here
A concise AI-generated summary of the paper will appear here once you click Generate AI Snapshot.
TL;DR
Flicker is presented, an infrastructure for executing security-sensitive code in complete isolation while trusting as few as 250 lines of additional code, and can provide meaningful, fine-grained attestation of the code executed (as well as its inputs and outputs) to a remote party.
Abstract
We present Flicker, an infrastructure for executing security-sensitive code in complete isolation while trusting as few as 250 lines of additional code. Flicker can also provide meaningful, fine-grained attestation of the code executed (as well as its inputs and outputs) to a remote party. Flicker guarantees these properties even if the BIOS, OS and DMA-enabled devices are all malicious. Flicker leverages new commodity processors from AMD and Intel and does not require a new OS or VMM. We demonstrate a full implementation of Flicker on an AMD platform and describe our development environment for simplifying the construction of Flicker-enabled code.
Keywords
Computer Science
ACM SIGOPS Operating Systems ReviewXen and the art of virtualization
5,948 Citations2003Paul Barham, Boris Dragovic +7 more
Xen and the art of virtualization
2,075 Citations2003Paul Barham, Boris Dragovic +7 more
Xen, an x86 virtual machine monitor which allows multiple commodity operating systems to share conventional hardware in a safe and resource managed fashion, but without sacrificing either performance or functionality, considerably outperform competing commercial and freely available solutions.
BOINC: A System for Public-Resource Computing and Storage
1,912 Citations2005David P. Anderson
The goals of BOINC are described, the design issues that were confronted, and the solutions to these problems are described.
IEEE Security & PrivacyUSENIX Security Symposium
1,516 Citations2004Washington Usa August, David Moore +2 more
Communications of the ACMSETI@home
1,287 Citations2002David P. Anderson, Jeff Cobb +3 more
Millions of computer owners worldwide contribute computer time to the search for extraterrestrial intelligence, performing the largest computation ever.
USENIX Security SymposiumDesign and implementation of a TCG-based integrity measurement architecture
1,020 Citations2004Reiner Sailer, Xiaolan Zhang +2 more
This work shows that many of the Microsoft NGSCB guarantees can be obtained on today's hardware and today's software and that these guarantees do not require a new CPU mode or operating system but merely depend on the availability of an independent trusted entity, a TPM for example.
Lecture notes in computer scienceCIL: Intermediate Language and Tools for Analysis and Transformation of C Programs
971 Citations2002George C. Necula, Scott McPeak +2 more
The structure of CIL is described, with a focus on how it disambiguates those features of C that were found to be most confusing for program analysis and transformation, allowing a complete project to be viewed as a single compilation unit.
Terra
408 Citations2003Tal Garfinkel, Ben Pfaff +3 more
A flexible architecture for trusted computing, called Terra, that allows applications with a wide range of security requirements to run simultaneously on commodity hardware, is presented.
USENIX Security SymposiumStronger password authentication using browser extensions
361 Citations2005B. B. Ross, Collin Jackson +3 more
A browser extension, PwdHash, that transparently produces a different password for each site, improving web password security and defending against password phishing and other attacks is described.
The design and implementation of a certifying compiler
358 Citations1998George C. Necula, Peter Lee
The design and implementation of a compiler that translates programs written in a type-safe subset of the C programming language into highly optimized DEC Alpha assembly language programs, and a certifier that automatically checks the type safety and memory safety of any assembly language program produced by the compiler are presented.
Computer NetworksBuilding a high-performance, programmable secure coprocessor
335 Citations1999Sean W. Smith, Steve Weingart
Some of issues the authors faced when attempting to build a high-performance secure coprocessor that balances security with easy third-party programmability are discussed.
ACM Transactions on Information and System SecurityPublic-key cryptography and password protocols
315 Citations1999Shai Halevi, Hugo Krawczyk
USENIX Security SymposiumPreventing privilege escalation
287 Citations2003Niels Provos, M. Friedl +1 more
The design and analysis of the "Systrace" facility is presented which supports fine grained process confinement, intrusion detection, auditing and privilege elevation, and it is shown that Systrace is efficient and does not impose significant performance penalties.
BIND: A Fine-Grained Attestation Service for Secure Distributed Systems
252 Citations2005Elaine Shi, Adrian Perrig +1 more
BIND offers a general solution toward establishing a trusted environment for distributed system designers and incorporates the verification of input data integrity into the attestation, i.e., through one signature, the authors can vouch for the entire chain of processes that have performed transformations over a piece of data.
Pioneer
221 Citations2005Arvind Seshadri, Mark Luk +4 more
A primitive, called Pioneer, is proposed, as a first step towards verifiable code execution on untrusted legacy hosts and can be used as a basic building block to build security systems.
Munich Personal RePEc Archive (Ludwig Maximilian University of Munich)Using Secure Coprocessors
221 Citations1994Bennet Yee
This thesis addresses the distributed security problem by proposing the addition of a small, physically secure hardware module, a secure coprocessor, to standard workstations and PCs and demonstrates how security properties may be bootstrapped using cryptographic techniques from this central nucleus of security within a combined hardware/software architecture.
FigsharePrivtrans : automatically partitioning programs for privilege separation
209 Citations2018David Brumley, Dawn Song
This work designs techniques and develops a tool called Privtrans that allows for automatically integrate privilege separation into source code, provided a few programmer annotations, and proposes optimization techniques that augment static analysis with dynamic information.
OSLO: improving the security of trusted computing
204 Citations2007Bernhard Kauer
This paper proposes to use the dynamic root of trust feature of newer x86 processors as this shortens the trust chain, can minimize the Trusted Computing Base of applications and is less vulnerable to TPM and BIOS attacks.
TSpaceSplitting interfaces: making trust between applications and operating systems configurable
176 Citations2006Richard Ta-Min, Lionel Litty +1 more
The design and implementation of Proxos is described, a system that allows applications to configure their trust in the OS by partitioning the system call interface into trusted and untrusted components.
ACM Transactions on Computer SystemsSecure program partitioning
172 Citations2002Steve Zdancewic, Lantian Zheng +2 more
This paper presents secure program partitioning, a language-based technique for protecting confidential data during computation in distributed systems containing mutually untrusted hosts and suggests that this is a promising way to obtain secure distributed computation.
Reducing TCB complexity for security-sensitive applications
165 Citations2006Lenin Singaravelu, Calton Pu +2 more
AppCores with tens of thousands of lines of code running on a hundred thousand lines of systems software code are presented, showing the performance penalty of AppCores to be modest (a few percent) compared to current software.
Securing Web servers against insider attack
78 Citations2005Shan Jiang, Sean W. Smith +1 more
This work presents a vision: using secure coprocessors to establish trusted coservers at Web servers and moving sensitive computations inside these co-servers and presents a prototype implementation of this vision that scales to realistic workloads.
Certifying program execution with secure processors
73 Citations2003Benjie Chen, Robert Morris
Cerium is a trusted computing architecture that protects a program's execution from being tampered while the program is running and cryptographically authenticates and copy-protects each program's instructions and data when they are stored in the untrusted off-chip DRAM.
Minimal TCB Code Execution
70 Citations2007Jonathan M. McCune, Bryan Parno +3 more
An architecture that allows code to execute in complete isolation from other software while trusting only a tiny software base that is orders of magnitude smaller than even minimalist virtual machine monitors is proposed.
How low can you go?
60 Citations2008Jonathan M. McCune, Bryan Parno +3 more
Implementing several suggestions that leverage existing processor technology, retain security, and improve performance will finally allow application developers to focus exclusively on the security of their own code, enabling it to execute in isolation from the numerous vulnerabilities in the underlying layers of legacy code.
Minimal TCB Code Execution (Extended Abstract)
26 Citations2007Jonathan M. McCune, Bryan Parno +3 more
Journal of OphthalmologyAccess control for ad-hoc collaboration
13 Citations2001Edward W. Felten, Dirk Balfanz
This dissertation investigates how to protect sensitive resources in the presence of ad-hoc collaboration and proposes and implements an access control mechanism for distributed Java applications that can span administrative domains.
WebALPS Implementation and Performance Analysis: Using Trusted Co-servers to Enhance Privacy and Security of Web Interactions
12 Citations2001Shan Jiang
The foundations of the credibility of WebALPS co-servers are examined and performance test results of the system are presented which support the argument that WebALps approach provides a systematic and practical way to address the remote trust issue.
XRDS Crossroads The ACM Magazine for StudentsSigning electronic contracts
5 Citations2000Dávid Molnár
A secondary problem facing electronic commerce is self-enforcing contract design and three approaches for handling electronic contracts include 1) no trusted third party protocols, 2) strongly-trustedThird party protocols and 3) weakly-trusting third party Protocols.