NDLI: PRIMA: policy-reduced integrity measurement architecture

Please wait, while we are loading the content...

Access control, confidentiality and privacy for video surveillance databases

Traust: a trust negotiation-based authorization service for open systems

Trust management with delegation in grouped peer-to-peer communities

Systematic control and management of data integrity

A model-checking approach to analysing organisational controls in a loan origination process

A usage-based authorization framework for collaborative computing systems

Redirection policies for mission-based information sharing

Security in enterprise resource planning systems and service-oriented architectures

Key management for non-tree access hierarchies

TrustBAC: integrating trust relationships into the RBAC model for access control in open systems

Fine-grained role-based delegation in presence of the hybrid role hierarchy

The secondary and approximate authorization model and its application to Bell-LaPadula policies

Information flow property preserving transformation of UML interaction diagrams

Inter-instance authorization constraints for secure workflow management

XACML policy integration algorithms: not to be confused with XACML policy combination algorithms!

PRIMA: policy-reduced integrity measurement architecture

Integrating presence inference into trust management for ubiquitous systems

Delegation in the role graph model

Secure resource description framework: an access control model

Towards reasonability properties for access-control policy languages

Role-based access management for ad-hoc collaborative sharing

Supporting authorization query and inter-domain role mapping in presence of hybrid role hierarchy

On classifying access control implementations for distributed systems

Constraint generation for separation of duty

Data-centric security: role analysis and role typestates

Semantic access control for information interoperation

PRIMA: policy-reduced integrity measurement architecture

Content Provider	ACM Digital Library
Author	Shankar, Umesh Jaeger, Trent Sailer, Reiner
Abstract	We propose an integrity measurement approach based on information flow integrity,which we call the Policy-Reduced Integrity Measurement Architecture (PRIMA).The recent availability of secure hardware has made it practical for a system to measure its own integrity, such that it can generate an integrity proof for remote parties. Various approaches have been proposed,but most simply measure the loaded code and static data to approximate runtime system integrity.We find that these approaches suffer from two problems: (1)the load-time measurements of code alone do not accurately reflect runtime behaviors,such as the use of untrusted network data,and (2) they are ineficient,requiring all measured entities to be known and fully trusted even if they have no impact on the target application.Classical integrity models are based on information flow,so we design the PRIMA approach to enable measurement of information flow integrity and prove that it achieves these goals. We prove how a remote party can verify useful information flow integrity properties using PRIMA. A PRIMA prototype has been built based on the open-source Linux Integrity Measurement Architecture (IMA)using SELinux policies to provide the information flow.
Starting Page	19
Ending Page	28
Page Count	10
File Format	PDF
ISBN	1595933530
DOI	10.1145/1133058.1133063
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2006-06-07
Publisher Place	New York
Access Restriction	Subscribed
Subject Keyword	Remote attestation Information flow Clark-wilson lite integrity
Content Type	Text
Resource Type	Article

Central Library (ISO-9001:2015 Certified)
Indian Institute of Technology Kharagpur
Kharagpur, West Bengal, India | PIN - 721302

See location in the Map
03222 282435
Mail: support@ndl.gov.in

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in