Search results

article

Toward Digital Transformation of Processes in Legal Metrology for Weighing Instruments

Alexander Oppermann, Samuel Eickelberg, John Exner

Annals of Computer Science and Information Systems > 2020 > Vol. 21 > 559--562

The digital transformation of sovereign processes is a driving force to streamline and innovate processes for measuring instruments under legal control. Providing trust is the essential purpose of Legal Metrology and still a challenging task in the digital domain. Taking the strict legal framework into account, a distributed software architecture is presented that offers privacy, security and resilience...

article

Seamless communication for crisis management

W. Wojciechowicz, J. Fournier, M. Konecny, S. Vanya, more

Technical Sciences / University of Warmia and Mazury in Olsztyn > 2012 > nr 15(1) > 65-79

SECRICOM - Seamless Communication for crisis management was a research and development project, realised within the Seventh Framework Programme (7PR). The aim of this project was to develop reference solution based on existing infrastructure, which will be capable to ensure secure and efficient communication for operational crisis management. The project was an answer to the European Security Research...

article

Securing agents using Secure Docking Module

E. Gatial, Z. Balogh, D. M. Hein, L. Hluchý, more

Technical Sciences / University of Warmia and Mazury in Olsztyn > 2012 > nr 15(1) > 111-122

Modern communication and computing devices have the potential to increase the efficiency of disaster response. Mobile agents and seamless push-to-talk communication embody decentralised and flexible technologies to leverage this potential. While mobile agent platforms are facing greater variety of security risks compared to a classical client-server approach, trusted computing is capable of alleviating...

article

A noninterference trusted dual system security guarantee method based on secure memory

Yu Hong, Yi Li, Haining Tan

Concurrency and Computation: Practice and Experience > 35 > 2 > n/a - n/a

With the continuous maturity and development of single hardware security mechanism, it has been widely used in the field of information technology, but the single hardware mechanism has insufficient security guarantee in its own supporting drivers and other key programs. In response to this problem, this article proposes a trusted isolation model based on the noninterference theory and gives a formal...

article

A dual‐system trusted computing node construction method based on ARM multi‐core CPU architecture

Yu Hong, Zhenhu Ning, Yu Sun, Changxiang Shen

Concurrency and Computation: Practice and Experience > 34 > 19 > n/a - n/a

Computer node security is the source and foundation of information system security. Trusted computing dual system architecture is an important implementation method to solve the security assurance by establishing the dual system of computing nodes, on the one hand, to achieve isolation on the other hand to achieve the active metrics of the system. This article systematically analyzes the dual architecture...

article

An efficient anonymous remote attestation scheme for trusted computing based on improved CPK

Yu Fajiang, Chen Jing, Xiang Yang, Zhu Jiacheng, more

Electronic Commerce Research > 2019 > 19 > 3 > 689-718

The platform remote attestation (RA) is one of the main features of trusted computing platform proposed by the trusted computing group (TCG). The privacy certificate authority (CA) solution of RA requires users to pay for multiple certificates, and the direct anonymous attestation (DAA) solution leads to inefficiency. TCG RA also suffers from limitations of platform configuration privacy. This paper...

article

Using mobile phones to enhance computing platform trust

Wei Feng, Yu Qin, Dengguo Feng

Telecommunication Systems > 2018 > 69 > 2 > 187-205

This paper presents a new method to enhance the trust of traditional computing device by using the popular mobile phone. We first propose a formal method to analyze the platform trust establishment process based on trusted computing technology, and the formal results reveal possible attack and suggest potential solutions. Then, we design an improved solution, in which the mobile phone is extended...

article

Research on trusted DNP3-BAE protocol based on hash chain

Ye Lu, Tao Feng

EURASIP Journal on Wireless Communications and Networking > 2018 > 2018 > 1 > 1-10

To solve the security problem of industrial Ethernet DNP3 protocol broadcast authentication, the attack vector and security requirements of trusted DNP3 protocol are analysed. First, the paper adopts a trusted platform into the control network and authenticates the identity and security status of the DNP3 client and server to prevent node sensitive information from being compromised. Second, a trusted...

article

The task of building a trusted computing environment on the Intel hardware platform

A. Yu. Chernov, A. S. Konoplev, D. V. Reshetov

Automatic Control and Computer Sciences > 2017 > 51 > 8 > 844-847

The problem of building a trusted computing environment on the basis of modern computing devices has been considered. The main features of software execution at different levels of privilege have been indicated. The architecture of the Intel ME subsystem has been considered. The potential threats of Intel ME technology have been highlighted, and possible ways to eliminate them have been given.

chapter

A Remote-Attestation-Based Extended Hash Algorithm for Privacy Protection

Yongxiong Zhang, Liangming Wang, Yucong You, Luxia Yi

2017 International Conference on Computer Network, Electronic and Automation (ICCNEA) > 254 - 257

2017 International Conference on Computer Network, Electronic and Automation (ICCNEA)

Compared to other remote attestation methods, the binary-based approach is the most direct and complete one, but privacy protection has become an important problem. In this paper, we presented an Extended Hash Algorithm (EHA) for privacy protection based on remote attestation method. Based on the traditional Merkle Hash Tree, EHA altered the algorithm of node connection. The new algorithm could ensure...

article

A star-style trust model with the ability of data recovery for trusted computing platform

Lu Chen, Huanguo Zhang, Qing Zhou, Liqiang Zhang

Wuhan University Journal of Natural Sciences > 2016 > 21 > 2 > 115-120

Varieties of trusted computing products usually follow the mechanism of liner-style chain of trust according to the specifications of TCG. The distinct advantage is that the compatibility with the existing computing platform is preferable, while the shortcomings are obvious simultaneously. A new star-style trust model with the ability of data recovery is proposed in this paper. The model can enhance...

chapter

Exploring Granular flow Integrity for Interconnected Trusted Platforms

Adrian L. Shaw, Hamza Attak

2017 IEEE Trustcom/BigDataSE/ICESS > 594 - 601

2017 IEEE Trustcom/BigDataSE/ICESS

Existing attestation solutions based on Linux Integrity Measurement Architecture treat the network as an untrusted input. Thus, they often employ strict access control mechanisms with tunneling policies to prevent network flows from tainting the system. However, these different access control policies are challenging for administrators to model and verify for different Linux deployments, making them...

chapter

Design and Analysis of a Modified Remote Attestation Protocol

Monika Santra, Sateesh K. Peddoju, A.K. Bhattacharjee, Arindam Khan

2017 IEEE Trustcom/BigDataSE/ICESS > 578 - 585

2017 IEEE Trustcom/BigDataSE/ICESS

Secure interaction amongst system components is inherent to ensure the trustworthiness of the applications. In a distributed system, the attester should know whether the communicating client as well as the user who is using that client system is trustworthy. This can be achieved by a technique called remote attestation. This study presents a three-phase remote attestation protocol which provides relaxation...

article

On the Design and Implementation of an Integrated Security Architecture for Cloud with Improved Resilience

Vijay Varadharajan, Udaya Tupakula

IEEE Transactions on Cloud Computing > 2017 > 5 > 3 > 375 - 389

In this paper, we propose an integrated security architecture which combines policy based access control with intrusion detection techniques and trusted computing technologies for securing distributed applications running on virtualised systems. Our security architecture incorporates access control security policies for secure interactions between applications and virtual machines in different physical...

article

Providing User Security Guarantees in Public Infrastructure Clouds

Nicolae Paladi, Christian Gehrmann, Antonis Michalas

IEEE Transactions on Cloud Computing > 2017 > 5 > 3 > 405 - 419

The infrastructure cloud (IaaS) service model offers improved resource flexibility and availability, where tenants – insulated from the minutiae of hardware maintenance – rent computing resources to deploy and operate complex systems. Large-scale services running on IaaS platforms demonstrate the viability of this model; nevertheless, many organizations operating on sensitive data avoid migrating...

chapter

Research on High Performance Secure Mobile Terminal Based on Offline Business Detection

Xu Jun, Zhang Xiaoyu

2017 4th International Conference on Information Science and Control Engineering (ICISCE) > 1647 - 1651

2017 4th International Conference on Information Science and Control Engineering (ICISCE)

In order to prevent users from fake, this paper establishes a highly secure mobile terminal architecture based on ARM TrustZone, and analyzes the communication and memory sharing between trusted execution environment and common execution environment. The trust model of user operation is established, then propose a self _destruction mechanism of mobile equipment based on chip materials to detect fraudulent...

chapter

A red team blue team approach towards a secure processor design with hardware shadow stack

Cyril Bresch, Adrien Michelet, Laurent Amato, Thomas Meyer, more

2017 IEEE 2nd International Verification and Security Workshop (IVSW) > 57 - 62

2017 IEEE 2nd International Verification and Security Workshop (IVSW)

Software attacks are commonly performed against embedded systems in order to access private data or to run restricted services. In this work, we demonstrate some vulnerabilities of commonly use processor which can be leveraged by hackers to attack a system. The targeted devices are based on open processor architectures OpenRISC and RISC-V. Several software exploits are discussed and demonstrated while...

article

Trust management for reliable decision making among social objects in the Social Internet of Things

A. Meena Kowshalya, M.L. Valarmathi

IET Networks > 2017 > 6 > 4 > 75 - 80

The Internet is populated with billions of electronic gadgets that have become a part of our fabric. Internet of Things is gaining popularity in at most all applications from smart buildings, intelligent transportation, healthcare and defence. IoT is a many vision one paradigm technology. One of the many visions of IoT is to make ‘Things’ social. Social Internet of Things (SIoT) is a young paradigm...

article

Fuzzy logic approach to modelling trust in cloud computing<?show [AQ ID=Q1]?>

Mary-Jane Sule, Maozhen Li, Gareth Taylor, Clement Onime

IET Cyber-Physical Systems: Theory & Applications > 2017 > 2 > 2 > 84 - 89

Despite the growing deployment of mission critical applications on computing systems, trust and security continues to hinder its full adoption and deployment on cloud computing platforms. In addition to accountability and non-repudiation on the cloud deployment, end-users want to be confident of availability and reliability of services. For any cloud platform to be secure and trusted, the individual...

article

Robust profiled attacks: should the adversary trust the dataset?

Liran Lerman, Zdenek Martinasek, Olivier Markowitch

IET Information Security > 2017 > 11 > 4 > 188 - 194

Side-channel attacks provide tools to analyse the degree of resilience of a cryptographic device against adversaries measuring leakages (e.g. power traces) on the target device executing cryptographic algorithms. In 2002, Chari et al. introduced template attacks (TA) as the strongest parametric profiled attacks in an information theoretic sense. Few years later, Schindler et al. proposed stochastic...

INFONA - science communication portal

Search results

Toward Digital Transformation of Processes in Legal Metrology for Weighing Instruments

Seamless communication for crisis management

Securing agents using Secure Docking Module

A noninterference trusted dual system security guarantee method based on secure memory

A dual‐system trusted computing node construction method based on ARM multi‐core CPU architecture

An efficient anonymous remote attestation scheme for trusted computing based on improved CPK

Using mobile phones to enhance computing platform trust

Research on trusted DNP3-BAE protocol based on hash chain

The task of building a trusted computing environment on the Intel hardware platform

A Remote-Attestation-Based Extended Hash Algorithm for Privacy Protection

A star-style trust model with the ability of data recovery for trusted computing platform

Exploring Granular flow Integrity for Interconnected Trusted Platforms

Design and Analysis of a Modified Remote Attestation Protocol

On the Design and Implementation of an Integrated Security Architecture for Cloud with Improved Resilience

Providing User Security Guarantees in Public Infrastructure Clouds

Research on High Performance Secure Mobile Terminal Based on Offline Business Detection

A red team blue team approach towards a secure processor design with hardware shadow stack

Trust management for reliable decision making among social objects in the Social Internet of Things

Fuzzy logic approach to modelling trust in cloud computing<?show [AQ ID=Q1]?>

Robust profiled attacks: should the adversary trust the dataset?

Filter options

Publication date

Content availability

Publication type

Keywords

Data set

INFONA - science communication portal

Search results

Add recipient

Sending message cancelled

Are you sure you want to cancel sending this message?

Send message

Filter options

Publication date

Date range setting

Set the date range to filter the displayed results. You can set a starting date, ending date or both. You can enter the dates manually or choose them from the calendar.

Content availability

Publication type

Keywords

Data set

Reporting an error / abuse

Sending the report failed

Accessibility options