2005 · 126 citations · 15 references
Program CheckingEngineeringInformation SecurityRich FunctionalityVerificationInformation ForensicsFormal VerificationSoftware AnalysisX86-compatible ProcessorsTrusted Execution EnvironmentRuntime VerificationSelf-checking ProgramsComputer EngineeringSecure By DesignComputer ScienceGeneric AttackData SecurityCryptographySoftware SecurityProgram AnalysisSoftware TestingSystem SoftwareIntegrity Verification
Self-checking software tamper resistance mechanisms employing checksums, including advanced systems as recently proposed by Chang and Atallah (2002) and Horne et al. (2002) have been promoted as an alternative to other software integrity verification techniques. Appealing aspects include the promise of being able to verify the integrity of software independent of the external support environment, as well as the ability to automatically integrate checksumming code during program compilation or linking. In this paper we show that the rich functionality of many modern processors, including UltraSparc and x86-compatible processors, facilitates automated attacks which defeat such checksumming by self-checking programs.
15
Ernie Brickell, Jan Camenisch, Liqun Chen · 2004 · 922 citations
Direct Anonymous Attestation, Engineering, Information Security +22
SWATT: software-based attestation for embedded devices
Abhijith Seshadri, Adrian Perrig, Leendert van Doorn et al. · 2004 · 690 citations
Engineering, Information Security, Memory Content Attestation +18
Copilot - a coprocessor-based kernel runtime integrity monitor
Nick L. Petroni, Timothy Fraser, Jesús Molina et al. · 2004 · 449 citations