NDLI: Attestation-based policy enforcement for remote access

Please wait, while we are loading the content...

Operational experiences with high-volume network intrusion detection

On mutually-exclusive roles and separation of duty

Attacking and repairing the winZip encryption scheme

Pong-cache poisoning in GUESS

Direct anonymous attestation

IP covert timing channels: design and detection

Privacy and security in library RFID: issues, practices, and architectures

A PIN-entry method resilient against shoulder surfing

Verifying policy-based security for web services

On the effectiveness of address-space randomization

The dual receiver cryptosystem and its applications

Trusting a trusted system

On the difficulty of scalably detecting network attacks

KNOW Why your access was denied: regulating feedback for usable security

Reusable cryptographic fuzzy extractors

Web tap: detecting covert web traffic

Concealing complex policies with hidden credentials

Private inference control

Parallel mixing

New client puzzle outsourcing techniques for DoS resistance

A decision procedure for the verification of security protocols with explicit destructors

Attestation-based policy enforcement for remote access

Versatile padding schemes for joint signature and encryption

Testing network-based intrusion detection signatures using mutant exploits

Comparing the expressive power of access control models

Cryptanalysis of a provably secure CRT-RSA algorithm

On achieving software diversity for improved network security using distributed coloring algorithms

k-anonymous secret handshakes with reusable credentials

Security policies for downgrading

Mitigating bandwidth-exhaustion attacks using congestion puzzles

Using build-integrated static checking to preserve correctness invariants

Gray-box extraction of execution graphs for anomaly detection

ID-based encryption for complex hierarchies with applications to forward security and broadcast encryption

Payload attribution via hierarchical bloom filters

Group signatures with verifier-local revocation

Attestation-based policy enforcement for remote access

Content Provider	ACM Digital Library
Author	van Doorn, Leendert Jaeger, Trent Sailer, Reiner Zhang, Xiaolan
Abstract	Intranet access has become an essential function for corporate users. At the same time, corporation's security administrators have little ability to control access to corporate data once it is released to remote clients. At present, no confidentiality or integrity guarantees about the remote access clients are made, so it is possible that an attacker may have compromised a client process and is now downloading or modifying corporate data. Even though we have corporate-wide access control over remote users, the access control approach is currently insufficient to stop these malicious processes. We have designed and implemented a novel system that empowers corporations to verify client integrity properties and establish trust upon the client policy enforcement before allowing clients (remote) access to corporate Intranet services. Client integrity is measured using a Trusted Platform Module (TPM), a new security technology that is becoming broadly available on client systems, and our system uses these measurements for access policy decisions enforced upon the client's processes. We have implemented a Linux 2.6 prototype system that utilizes the TPM measurement and attestation, existing Linux network control (Netfilter), and existing corporate policy management tools in the Tivoli Access Manager to control remote client access to corporate data. This prototype illustrates that our solution integrates seamlessly into scalable corporate policy management and introduces only a minor performance overhead.
Starting Page	308
Ending Page	317
Page Count	10
File Format	PDF
ISBN	1581139616
DOI	10.1145/1030083.1030125
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2004-10-25
Publisher Place	New York
Access Restriction	Subscribed
Subject Keyword	Remote access Trusted computing Security management
Content Type	Text
Resource Type	Article

Central Library (ISO-9001:2015 Certified)
Indian Institute of Technology Kharagpur
Kharagpur, West Bengal, India | PIN - 721302

See location in the Map
03222 282435
Mail: support@ndl.gov.in

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in