Grawrock / Reimer / Sadeghi Future of Trust in Computing

Proceedings of the First International Conference Future of Trust in Computing 2008
1. Auflage 2009
ISBN: 978-3-8348-9324-6
Verlag: Vieweg+Teubner (GWV)
Format: PDF
Kopierschutz: Adobe DRM (»Systemvoraussetzungen)

E-Book, Englisch, 227 Seiten

Several constituencies are working on building and preserving users’ trust in the digital economy through - are examining new behaviors associated with ubiquitous connectivity and mobile computing as wel- hance privacy using new technologies and processes in order to ensure that concerns about privacy do where users’ rights are protected and technology is designed in a way to make sure it can be trusted. Consumer advocates are ensuring that users’ requirements and concerns are understood and recognized. trusted systems. And technologists and architects in industry are designing products and technologies are only now starting to be exchanged. - ability, economics and provable security and assurance. Many papers touch upon innovative topics and areas have achieved during the last decade. Ahmad-Reza Sadeghi Claire Vishik Session 1: Security Environment and Threats Study on Information Security and e-Trust in Spanish households Instituto Nacional de Tecnologías de la Comunicación (INTECO) León, Spain [e-mail] Abstract Security and e-Trust in Spanish households has been conducted by INTECO (The Information Security Observatory. It is a stud- vidual households with Internet connection, spread across the whole country. security incidents in the security security equipment at the perception regarding security on the Internet in Spanish 1 Objectives security, trust and security level incidents in Spanish Internet user Security and e-Trust- and obstacles related to the Security Habits security risks. Security and Vulnerability Incidents: horses, worms, spyware, etc- net user, income, and other sociologically relevant variables.

Autoren/Hrsg.

Grawrock, David

Reimer, Helmut

Sadeghi, Ahmad-Reza

Vishik, Claire

Inhaltsverzeichnis

1;Contents;6
2;Foreword;9
3;Session 1:Security Environmentand Threats;10
3.1;Study on Information Security and e-Trust in Spanish households;11
3.1.1;1 Objectives;11
3.1.2;2 Methodological design;12
3.1.3;3 Main results;17
3.1.4;4 Conclusion;22
4;Session 2: Technical Issues with Trust in Computing and Proposed Solutions;23
4.1;Implementing a Portable Trusted Environment;24
4.1.1;1 Introduction;24
4.1.2;2 A Trusted Medical Application;25
4.1.3;3 The Trust Extension Device;27
4.1.4;4 TED Application: Trusted Email Client;32
4.1.5;5 Conclusions;35
4.2;New Directions for Hardware-assistedTrusted Computing Policies(Position Paper);37
4.2.1;1 Introduction;37
4.2.2;2 Policy Engineering;39
4.2.3;3 Traps and Security;40
4.2.4;4 Proposed Hardware Features;42
4.2.5;5 Self-healing Perspective;43
4.2.6;6 Conclusion;43
4.2.7;7 Acknowledgements;44
4.3;Smart Cards and remote entrusting;45
4.3.1;1 Introduction;45
4.3.2;2 Remote Entrusting;46
4.3.3;3 The USB Smart Card;48
4.3.4;4 Levels of Trust;49
4.3.5;5 Limitations;51
4.3.6;6 Conclusion;52
5;Session 3: Designing for the Future:New Approaches;53
5.1;Future Threats to Future Trust;54
5.1.1;1 The Forward workshops and threats on the net;54
5.1.2;2 Trust in critical and large-scale systems;55
5.1.3;3 Fraud and the lack of trust;57
5.1.4;4 Malware;58
5.1.5;5 Concluding remarks;59
5.1.6;6 Acknowledgements;59
5.2;Trusted Trustworthy ProofPosition Paper;60
5.2.1;1 The Security Challenge;60
5.2.2;2 Trust and Trustworthiness;61
5.2.3;3 Requirements;62
5.2.4;4 Can it be Achieved?;63
5.2.5;5 Cost;63
5.2.6;6 Conclusions;64
5.3;An ongoing Game of Tetris:Integrating Trusted Computing in Java,block-by-block;65
5.3.1;1 Introduction;65
5.3.2;2 The Pieces of the Game;67
5.3.3;3 Conclusions and Outlook;71
5.4;TrustCube: An Infrastructure thatBuilds Trust in Client;73
5.4.1;1 Introduction;73
5.4.2;2 Related Works;74
5.4.3;3 TrustCube Infrastructure;77
5.4.4;4 Conclusion and Future Works;84
6;Session 4: Obtaining Trust and Modeling Trust Environments;85
6.1;Trust-based Information Sharing in Collaborative Communities: Issues and Challenges;86
6.1.1;1 Introduction;86
6.1.2;2 State of the art;88
6.1.3;3 Access control requirements;89
6.1.4;4 Trust-based Information Sharing;90
6.1.5;5 Privacy-aware Access Control;92
6.1.6;6 Trust Modelling, Computation and Protection;93
6.1.7;7 Conclusion;94
6.2;Can Economics Provide Insights into Trust Infrastructure?;96
6.2.1;1 Introduction;96
6.2.2;2 Problem Statement;97
6.2.3;3 Verification and Authentication Infrastructure;98
6.2.4;4 Exchange Economies, Monetary Economies and Asymmetric Information;99
6.2.5;5 Are Models and Approaches of Theoretical Economics Applicable to This Context?;101
6.2.6;6 Conclusions;103
6.3;Reviewing Privacy during Design – Voluntary Technology Dialogue System;105
6.3.1;1 Project Description;105
6.3.2;2 Voluntary Technology Dialogue System;106
6.3.3;3 Conclusion - policy relevance and market impact;109
7;Session 5: Applications: Trustin Health Systems;112
7.1;Trust and Privacy in Healthcare;113
7.1.1;1 Introduction;113
7.1.2;2 Trust in the Healthcare system;114
7.1.3;3 Risk positions in data-sharing;116
7.1.4;4 Risk Appraisal model;117
7.1.5;5 Overall attitude to Data-sharing;120
7.1.6;6 Evidence from the literature;120
7.1.7;7 Effect of countermeasures to reduce risk and improve trust;121
7.1.8;8 Conclusions;122
7.2;Protecting Patient Records from Unwarranted Access;124
7.2.1;1 Introduction;124
7.2.2;2 The Electronic Patient Record System;125
7.2.3;3 Protecting Patient Records;126
7.2.4;4 Related Work;128
7.2.5;5 Conclusion;129
7.3;Challenges in Data QualityAssurance in PervasiveHealth Monitoring Systems;131
7.3.1;1 Introduction;131
7.3.2;2 Use cases;132
7.3.3;3 Data Quality;134
7.3.4;4 Challenges;136
7.3.5;5 Related Work;140
7.3.6;6 Summary;142
8;Session 6: Future of Trust: New Models for Network, Device and Infrastructure Security;145
8.1;Towards one PC for systems with different security levels;146
8.1.1;1 Introduction;146
8.1.2;2 Virtualization;148
8.1.3;3 Hypervisor architecture;148
8.1.4;4 Hardware trends;150
8.1.5;5 Conclusion;151
8.2;Trust Relationships in Networked Context Aware Systems;153
8.2.1;1 Context Aware Systems;153
8.2.2;2 Trust Relationships;154
8.2.3;3 Trust with Networked Context Aware Systems;155
8.2.4;4 Dilemmas with Client Side Optimization;156
8.2.5;5 Dilemmas with Server Side Optimization;156
8.2.6;6 Challenges in Building Trust;157
8.2.7;7 Conclusion;157
8.3;Towards Trusted Network Access Control;158
8.3.1;1 Motivation;158
8.3.2;2 Introduction to Trusted Network Connect;159
8.3.3;3 tNAC – Trusted Network Access Control;165
8.3.4;4 Conclusion;167
9;Session 7: Usability;169
9.1;User-Friendly and Secure TPM-based Hard Disk Key Management;170
9.1.1;1 Problem Description;170
9.1.2;2 Solutions;171
9.1.3;3 Protecting System Integrity;174
9.1.4;4 Discussion;175
9.1.5;5 Conclusion;176
9.2;Requirements and Design Guidelines for a Trusted Hypervisor Interface;177
9.2.1;1 Introduction;177
9.2.2;2 Usage Scenarios;178
9.2.3;3 Requirements Analysis;179
9.2.4;4 Related Work;181
9.2.5;5 Design Conclusions;183
9.2.6;6 Outlook;187
10;Session 8: TCG Technology: Issues and Applications;189
10.1;Offline dictionary attack on TCG TPM weak authorisation data, and solution;190
10.1.1;1 Introduction;190
10.1.2;2 The Offline dictionary attack;191
10.1.3;3 Password-based key agreement;191
10.1.4;4 Solving the offline authData attack;192
10.1.5;5 Integration with TPM command architecture;193
10.1.6;6 Conclusion;193
10.2;Trusted Virtual Disk Images;194
10.2.1;1 Introduction;194
10.2.2;2 Related Work;195
10.2.3;3 Background;195
10.2.4;4 Trusted Vitual Disk Images;197
10.2.5;5 Life cycle;201
10.2.6;6 Conclusion;203
10.2.7;7 Future Work;203
10.3;Shall we trust WDDL?;205
10.3.1;1 Introduction;205
10.3.2;2 Timing Analysis of Differential Logic;207
10.3.3;3 Practical Test on DES WDDL Implemented in an Altera Stratix EP1S25 FPGA;209
10.3.4;4 Conclusion;210
10.4;Trusted Computing Management Server Making Trusted Computing User Friendly;213
10.4.1;1 Motivation;213
10.4.2;2 Managing and operation tasks for TC platforms;214
10.4.3;3 The Solution: Centralized and integrated Trusted;215
10.4.4;Computing and TPM management by a server.;215
10.4.5;4 Conclusion;218
11;Index;219