NDLI: Security through amnesia: a software-based solution to the cold boot attack on disk encryption

Please wait, while we are loading the content...

Understanding the prevalence and use of alternative plans in malware with network games

Distilling critical attack graph surface iteratively through minimum-cost SAT solving

"Mix-in-Place" anonymous networking using secure function evaluation

The socialbot network: when bots socialize for fame and money

A peel of onion

The science of cyber security experimentation: the DETER project

Facing the facts about image type in recognition-based graphical passwords

Improving robustness of DNS to software vulnerabilities

Exploring the potential benefits of expanded rate limiting in Tor: slow and steady wins the race with Tortoise

SEMAGE: a new image-based two-factor CAPTCHA

ASIDE: IDE support for web application security

An empirical study of visual security cues to prevent the SSLstripping attack

Key escrow from a safe distance: looking back at the Clipper Chip

Reliable telemetry in white spaces using remote attestation

Mitigating code-reuse attacks with control-flow locking

Nexat: a history-based approach to predict attacker actions

BareBox: efficient malware analysis on bare-metal

FORECAST: skimming off the malware cream

RIPE: runtime intrusion prevention evaluator

Security through amnesia: a software-based solution to the cold boot attack on disk encryption

Detecting and resolving privacy conflicts for collaborative data sharing in online social networks

PhorceField: a phish-proof password ceremony

Enabling secure VM-vTPM migration in private clouds

"Super nodes" in Tor: existence and security implication

BLOCK: a black-box approach for detection of state violation attacks towards web applications

Tracking payment card data flow using virtual machine state introspection

AdSentry: comprehensive and flexible confinement of JavaScript-based advertisements

Don't Bump, Shake on It: the exploitation of a popular accelerometer-based smart phone exchange and its secure replacement

deRop: removing return-oriented programming from malware

From prey to hunter: transforming legacy embedded devices into exploitation sensor grids

Automated remote repair for mobile malware

Detecting malware's failover C&C strategies with squeeze

Hit 'em where it hurts: a live security exercise on cyber situational awareness

Private search in the real world

Social snapshots: digital forensics for online social networks

Dynamic sample size detection in continuous authentication using sequential sampling

Exposing invisible timing-based traffic watermarks with BACKLIT

Smart metering de-pseudonymization

A server- and browser-transparent CSRF defense for web 2.0 applications

WebJail: least-privilege integration of third-party components in web mashups

Attacks on WebView in the Android system

Static detection of malicious JavaScript-bearing PDF documents

Security through amnesia: a software-based solution to the cold boot attack on disk encryption

Content Provider	ACM Digital Library
Author	Simmons, Patrick
Abstract	Disk encryption has become an important security measure for a multitude of clients, including governments, corporations, activists, security-conscious professionals, and privacy-conscious individuals. Unfortunately, recent research has discovered an effective side channel attack against any disk mounted by a running machine [23]. This attack, known as the cold boot attack, is effective against any mounted volume using state-of-the-art disk encryption, is relatively simple to perform for an attacker with even rudimentary technical knowledge and training, and is applicable to exactly the scenario against which disk encryption is primarily supposed to defend: an adversary with physical access. While there has been some previous work in defending against this attack [27], the only currently available solution suffers from the twin problems of disabling access to the SSE registers and supporting only a single encrypted volume, hindering its usefulness for such common encryption scenarios as data and swap partitions encrypted with different keys (the swap key being a randomly generated throw-away key). We present Loop-Amnesia, a kernel-based disk encryption mechanism implementing a novel technique to eliminate vulnerability to the cold boot attack. We contribute a novel technique for shielding multiple encryption keys from RAM and a mechanism for storing encryption keys inside the CPU that does not interfere with the use of SSE. We offer theoretical justification of Loop-Amnesia's invulnerability to the attack, verify that our implementation is not vulnerable in practice, and present measurements showing our impact on I/O accesses to the encrypted disk is limited to a slowdown of approximately 2x. Loop-Amnesia is written for x86-64, but our technique is applicable to other register-based architectures. We base our work on loop-AES, a state-of-the-art open source disk encryption package for Linux.
Starting Page	73
Ending Page	82
Page Count	10
File Format	PDF
ISBN	9781450306720
DOI	10.1145/2076732.2076743
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2011-12-05
Publisher Place	New York
Access Restriction	Subscribed
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Security through amnesia: a software-based solution to the cold boot attack on disk encryption (2011)

Security Through Amnesia: A Software-Based Solution to the Cold Boot Attack on Disk Encryption

Security Through Amnesia: A Software-Based Solution to the Cold Boot Attack on Disk Encryption

Security Through Amnesia: A Software-Based Solution to the Cold Boot Attack on Disk Encryption (2011)

Software solution: against cold boot attack.

Deadbolt: locking down android disk encryption

Least we remember: Cold boot attacks on encryption keys (2008)

Software Solution: Against Cold Boot Attack

Cold Boot Attacks on DDR2 and DDR3 SDRAM

Security through amnesia: a software-based solution to the cold boot attack on disk encryption

Similar Documents

Security through amnesia: a software-based solution to the cold boot attack on disk encryption (2011)

Security Through Amnesia: A Software-Based Solution to the Cold Boot Attack on Disk Encryption

Security Through Amnesia: A Software-Based Solution to the Cold Boot Attack on Disk Encryption

Security Through Amnesia: A Software-Based Solution to the Cold Boot Attack on Disk Encryption (2011)

Software solution: against cold boot attack.

Deadbolt: locking down android disk encryption

Least we remember: Cold boot attacks on encryption keys (2008)

Software Solution: Against Cold Boot Attack

Cold Boot Attacks on DDR2 and DDR3 SDRAM

Security through amnesia: a software-based solution to the cold boot attack on disk encryption