Trust Extension as a Mechanism for Secure Code Execution on Commodity Computers

Trust Extension as a Mechanism for Secure Code Execution on Commodity Computers
Title Trust Extension as a Mechanism for Secure Code Execution on Commodity Computers PDF eBook
Author Bryan Jeffrey Parno
Publisher Morgan & Claypool
Pages 209
Release 2014-06-01
Genre Computers
ISBN 1627054782

Download Trust Extension as a Mechanism for Secure Code Execution on Commodity Computers Book in PDF, Epub and Kindle

As society rushes to digitize sensitive information and services, it is imperative to adopt adequate security protections. However, such protections fundamentally conflict with the benefits we expect from commodity computers. In other words, consumers and businesses value commodity computers because they provide good performance and an abundance of features at relatively low costs. Meanwhile, attempts to build secure systems from the ground up typically abandon such goals, and hence are seldom adopted. In this book, I argue that we can resolve the tension between security and features by leveraging the trust a user has in one device to enable her to securely use another commodity device or service, without sacrificing the performance and features expected of commodity systems. At a high level, we support this premise by developing techniques to allow a user to employ a small, trusted, portable device to securely learn what code is executing on her local computer. Rather than entrusting her data to the mountain of buggy code likely running on her computer, we construct an on-demand secure execution environment which can perform security-sensitive tasks and handle private data in complete isolation from all other software (and most hardware) on the system. Meanwhile, non-security-sensitive software retains the same abundance of features and performance it enjoys today. Having established an environment for secure code execution on an individual computer, we then show how to extend trust in this environment to network elements in a secure and efficient manner. This allows us to reexamine the design of network protocols and defenses, since we can now execute code on endhosts and trust the results within the network. Lastly, we extend the user's trust one more step to encompass computations performed on a remote host (e.g., in the cloud). We design, analyze, and prove secure a protocol that allows a user to outsource arbitrary computations to commodity computers run by an untrusted remote party (or parties) who may subject the computers to both software and hardware attacks. Our protocol guarantees that the user can both verify that the results returned are indeed the correct results of the specified computations on the inputs provided, and protect the secrecy of both the inputs and outputs of the computations. These guarantees are provided in a non-interactive, asymptotically optimal (with respect to CPU and bandwidth) manner. Thus, extending a user's trust, via software, hardware, and cryptographic techniques, allows us to provide strong security protections for both local and remote computations on sensitive data, while still preserving the performance and features of commodity computers.

Trust Extension as a Mechanism for Secure Code Execution on Commodity Computers

Trust Extension as a Mechanism for Secure Code Execution on Commodity Computers
Title Trust Extension as a Mechanism for Secure Code Execution on Commodity Computers PDF eBook
Author Bryan Parno
Publisher
Pages 0
Release 2010
Genre
ISBN

Download Trust Extension as a Mechanism for Secure Code Execution on Commodity Computers Book in PDF, Epub and Kindle

Trust Extension as a Mechanism for Secure Code Execution on Commodity Computers

Trust Extension as a Mechanism for Secure Code Execution on Commodity Computers
Title Trust Extension as a Mechanism for Secure Code Execution on Commodity Computers PDF eBook
Author Bryan Jeffrey Parno
Publisher Morgan & Claypool Publishers
Pages 177
Release 2014-06-01
Genre Computers
ISBN 1627054790

Download Trust Extension as a Mechanism for Secure Code Execution on Commodity Computers Book in PDF, Epub and Kindle

As society rushes to digitize sensitive information and services, it is imperative to adopt adequate security protections. However, such protections fundamentally conflict with the benefits we expect from commodity computers. In other words, consumers and businesses value commodity computers because they provide good performance and an abundance of features at relatively low costs. Meanwhile, attempts to build secure systems from the ground up typically abandon such goals, and hence are seldom adopted. In this book, I argue that we can resolve the tension between security and features by leveraging the trust a user has in one device to enable her to securely use another commodity device or service, without sacrificing the performance and features expected of commodity systems. At a high level, we support this premise by developing techniques to allow a user to employ a small, trusted, portable device to securely learn what code is executing on her local computer. Rather than entrusting her data to the mountain of buggy code likely running on her computer, we construct an on-demand secure execution environment which can perform security-sensitive tasks and handle private data in complete isolation from all other software (and most hardware) on the system. Meanwhile, non-security-sensitive software retains the same abundance of features and performance it enjoys today. Having established an environment for secure code execution on an individual computer, we then show how to extend trust in this environment to network elements in a secure and efficient manner. This allows us to reexamine the design of network protocols and defenses, since we can now execute code on endhosts and trust the results within the network. Lastly, we extend the user's trust one more step to encompass computations performed on a remote host (e.g., in the cloud). We design, analyze, and prove secure a protocol that allows a user to outsource arbitrary computations to commodity computers run by an untrusted remote party (or parties) who may subject the computers to both software and hardware attacks. Our protocol guarantees that the user can both verify that the results returned are indeed the correct results of the specified computations on the inputs provided, and protect the secrecy of both the inputs and outputs of the computations. These guarantees are provided in a non-interactive, asymptotically optimal (with respect to CPU and bandwidth) manner. Thus, extending a user's trust, via software, hardware, and cryptographic techniques, allows us to provide strong security protections for both local and remote computations on sensitive data, while still preserving the performance and features of commodity computers.

Preventing Identity Crime: Identity Theft and Identity Fraud

Preventing Identity Crime: Identity Theft and Identity Fraud
Title Preventing Identity Crime: Identity Theft and Identity Fraud PDF eBook
Author Syed R. Ahmed
Publisher BRILL
Pages 779
Release 2020-04-14
Genre Law
ISBN 9004395970

Download Preventing Identity Crime: Identity Theft and Identity Fraud Book in PDF, Epub and Kindle

This book conducts a comprehensive study of identity crime, which encompasses both identity theft and identity fraud, and tackles head-on the various facets of what is needed to deal with one of the fastest growing crimes around the world.

Intelligent System Design

Intelligent System Design
Title Intelligent System Design PDF eBook
Author Suresh Chandra Satapathy
Publisher Springer Nature
Pages 865
Release 2020-08-10
Genre Technology & Engineering
ISBN 9811554005

Download Intelligent System Design Book in PDF, Epub and Kindle

This book presents a collection of high-quality, peer-reviewed research papers from the 6th International Conference on Information System Design and Intelligent Applications (INDIA 2019), held at Lendi Institute of Engineering & Technology, India, from 1 to 2 November 2019. It covers a wide range of topics in computer science and information technology, including data mining and data warehousing, high-performance computing, parallel and distributed computing, computational intelligence, soft computing, big data, cloud computing, grid computing and cognitive computing.

Code Nation

Code Nation
Title Code Nation PDF eBook
Author Michael J. Halvorson
Publisher Morgan & Claypool
Pages 404
Release 2020-04-22
Genre Computers
ISBN 1450377556

Download Code Nation Book in PDF, Epub and Kindle

Code Nation explores the rise of software development as a social, cultural, and technical phenomenon in American history. The movement germinated in government and university labs during the 1950s, gained momentum through corporate and counterculture experiments in the 1960s and 1970s, and became a broad-based computer literacy movement in the 1980s. As personal computing came to the fore, learning to program was transformed by a groundswell of popular enthusiasm, exciting new platforms, and an array of commercial practices that have been further amplified by distributed computing and the Internet. The resulting society can be depicted as a “Code Nation”—a globally-connected world that is saturated with computer technology and enchanted by software and its creation. Code Nation is a new history of personal computing that emphasizes the technical and business challenges that software developers faced when building applications for CP/M, MS-DOS, UNIX, Microsoft Windows, the Apple Macintosh, and other emerging platforms. It is a popular history of computing that explores the experiences of novice computer users, tinkerers, hackers, and power users, as well as the ideals and aspirations of leading computer scientists, engineers, educators, and entrepreneurs. Computer book and magazine publishers also played important, if overlooked, roles in the diffusion of new technical skills, and this book highlights their creative work and influence. Code Nation offers a “behind-the-scenes” look at application and operating-system programming practices, the diversity of historic computer languages, the rise of user communities, early attempts to market PC software, and the origins of “enterprise” computing systems. Code samples and over 80 historic photographs support the text. The book concludes with an assessment of contemporary efforts to teach computational thinking to young people.

Prophets of Computing

Prophets of Computing
Title Prophets of Computing PDF eBook
Author Dick van Lente
Publisher Morgan & Claypool
Pages 556
Release 2022-12-14
Genre Computers
ISBN 1450398189

Download Prophets of Computing Book in PDF, Epub and Kindle

When electronic digital computers first appeared after World War II, they appeared as a revolutionary force. Business management, the world of work, administrative life, the nation state, and soon enough everyday life were expected to change dramatically with these machines’ use. Ever since, diverse prophecies of computing have continually emerged, through to the present day. As computing spread beyond the US and UK, such prophecies emerged from strikingly different economic, political, and cultural conditions. This volume explores how these expectations differed, assesses unexpected commonalities, and suggests ways to understand the divergences and convergences. This book examines thirteen countries, based on source material in ten different languages—the effort of an international team of scholars. In addition to analyses of debates, political changes, and popular speculations, we also show a wide range of pictorial representations of "the future with computers."