NDLI: Countering trusting trust through diverse double-compiling

Content Provider	IEEE Xplore Digital Library
Author	Wheeler, D.A.
Copyright Year	2005
Description	Author affiliation: Inst. for Defense Analyses, Alexandria, VA (Wheeler, D.A.)
Abstract	An air force evaluation of Multics, and Ken Thompson's famous Turing award lecture "reflections on trusting trust, " showed that compilers can be subverted to insert malicious Trojan horses into critical software, including themselves. If this attack goes undetected, even complete analysis of a system's source code can not find the malicious code that is running, and methods for detecting this particular attack are not widely known. This paper describes a practical technique, termed diverse double-compiling (DDC), that detects this attack and some compiler defects as well. Simply recompile the source code twice: once with a second (trusted) compiler, and again using the result of the first compilation. If the result is bit-for-bit identical with the untrusted binary, then the source code accurately represents the binary. This technique has been mentioned informally, but its issues and ramifications have not been identified or discussed in a peer-reviewed work, nor has a public demonstration been made. This paper describes the technique, justifies it, describes how to overcome practical challenges, and demonstrates it
Starting Page	13
Ending Page	48
File Size	275414
Page Count	36
File Format	PDF
ISBN	0769524613
ISSN	10639527
DOI	10.1109/CSAC.2005.17
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2005-12-05
Publisher Place	USA
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Computer security Application software
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Countering Trusting Trust through Diverse Double-Compiling

Fully Countering Trusting Trust through Diverse Double-Compiling

Research on Theory Model of Software Dynamic Trustiness Based on Behavior Integrity

The Trust Management Model of Trusted Software

Trusting code.

Trust-enhanced alteration scenario for universal computer

Abstract an air force evaluation of multics, and ken.

SFTrust: A double trust metric based trust model in unstructured P2P system

Evaluation of diverse compiling for software-fault detection

Countering trusting trust through diverse double-compiling

Similar Documents

Countering Trusting Trust through Diverse Double-Compiling

Fully Countering Trusting Trust through Diverse Double-Compiling

Research on Theory Model of Software Dynamic Trustiness Based on Behavior Integrity

The Trust Management Model of Trusted Software

Trusting code.

Trust-enhanced alteration scenario for universal computer

Abstract an air force evaluation of multics, and ken.

SFTrust: A double trust metric based trust model in unstructured P2P system

Evaluation of diverse compiling for software-fault detection

Countering trusting trust through diverse double-compiling