loading...
A Model-Driven Framework for Trusted Computing Based Systems
Annapolis, Maryland, USA October 15-October 19
DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/EDOC.2007.5211th IEEE International Enterprise Di ...
 This Article 
 
PDF
HTML
 
 Share 
   
 Bibliographic References 
   
 Add to: 
 
Digg
Furl
Spurl
Blink
Simpy
Google
Del.icio.us
Y!MyWeb
 
 Search 
   
Masoom Alam, University of Innsbruck, AUSTRIA
Jean-Pierre Seifert, Samsung Information Systems America, San Jose, CA,USA
Xinwen Zhang, Samsung Information Systems America, San Jose, CA,USA
Existing approaches for Trust Management through soft- ware alone ? by their very principle ? are uncompromising and have inherent weaknesses. Once the information leaves the service provider platform, there is no way to guaran- tee the integrity of the information on the client (or service requestor) platform. The Trusted Computing Group pro- posed a quantum leap in security, a hardware based "root of trust" by which the integrity of a platform ? be a client or service provider can be verified. However, there is no approach for the integration of this novel but essentially straight forward concept into the distributed application de- velopment. We believe that the complexity of Trusted Com- puting (TC) is one of the key factors that will hinder its suc- cessful integration within the web services based distributed application realm. Model-driven techniques offer a promis- ing approach to alleviate the complexity of platforms. This contribution has three objectives. First, we detail SECTET ? a model-driven framework for leveraging TC concepts at a higher level of abstraction. We secondly elaborate the integration of platform-independent XACML policies with the platform-specific SELinux policies. Thirdly, we share our experiences regarding the implementation results of the SECTET on TC based systems.
Citation:
Masoom Alam, Jean-Pierre Seifert, Xinwen Zhang, "A Model-Driven Framework for Trusted Computing Based Systems," edoc, pp.75, 11th IEEE International Enterprise Distributed Object Computing Conference (EDOC 2007), 2007
Usage of this product signifies your acceptance of the Terms of Use.


Suggestions