• DocumentCode
    2756164
  • Title

    Minimal TCB Code Execution

  • Author

    McCune, Jonathan M. ; Parno, Bryan ; Perrig, Adrian ; Reiter, Michael K. ; Seshadri, Arvind

  • Author_Institution
    Carnegie Mellon Univ., Pittsburgh, PA
  • fYear
    2007
  • fDate
    20-23 May 2007
  • Firstpage
    267
  • Lastpage
    272
  • Abstract
    We propose an architecture that allows code to execute in complete isolation from other software while trusting only a tiny software base that is orders of magnitude smaller than even minimalist virtual machine monitors. Our technique also enables more meaningful attestation than previous proposals, since only measurements of the security-sensitive portions of an application need to be included. We achieve these guarantees by leveraging hardware support provided by commodity processors from AMD and Intel that are shipping today.
  • Keywords
    operating systems (computers); security of data; virtual machines; AMD; Intel; minimal TCB code execution; security-sensitive portions; virtual machine monitors; Application software; Computer architecture; Cryptography; Hardware; Information security; Kernel; Operating systems; Proposals; Sea measurements; Virtual machine monitors;
  • fLanguage
    English
  • Publisher
    ieee
  • Conference_Titel
    Security and Privacy, 2007. SP '07. IEEE Symposium on
  • Conference_Location
    Berkeley, CA
  • ISSN
    1081-6011
  • Print_ISBN
    0-7695-2848-1
  • Type

    conf

  • DOI
    10.1109/SP.2007.27
  • Filename
    4223231