NDLI: A framework for secure execution of software

Please wait, while we are loading the content...

A framework for secure execution of software

Content Provider	Springer Nature Link
Author	Maña, Antonio Lopez, Javier Ortega, Juan J. Pimentel, Ernesto Troya, Jose M.
Copyright Year	2004
Abstract	The protection of software applications is one of the most important problems to solve in information security because it has a crucial effect on other security issues. We can find in the literature many research initiatives that have tried to solve this problem, many of them based on the use of tamperproof hardware tokens. This type of solution depends on two basic premises: (i) increasing the physical security by using tamperproof devices and (ii) increasing the complexity of the analysis of the software. The first premise is reasonable. The second one is certainly related to the first one. In fact, its main goal is that the pirate user not be able to modify the software to bypass an operation that is crucial: checking the presence of the token. However, experience shows that the second premise is not realistic because analysis of the executable code is always possible. Moreover, the techniques used to obstruct the analysis process are not enough to discourage an attacker with average resources.In this paper, we review the most relevant works related to software protection, present a taxonomy of those works, and, most important, introduce a new and robust software protection scheme. This solution, called SmartProt, is based on the use of smart cards and cryptographic techniques, and its security relies only on the first of the premises given above; that is, SmartProt has been designed to avoid attacks based on code analysis and software modification. The entire system is described following a lifecycle approach, explaining in detail the card setup, production, authorization, and execution phases. We also present some interesting applications of SmartProt as well as the protocols developed to manage licences. Finally, we provide an analysis of its implementation details.
Starting Page	99
Ending Page	112
Page Count	14
File Format	PDF
ISSN	16155262
Journal	International Journal of Information Security
Volume Number	3
Issue Number	2
e-ISSN	16155270
Language	English
Publisher	Springer Berlin Heidelberg
Publisher Date	2004-11-01
Publisher Place	Berlin, Heidelberg
Access Restriction	One Nation One Subscription (ONOS)
Subject Keyword	Software protection Smart cards Information security Data Encryption Computer Communication Networks Operating Systems Coding and Information Theory Management of Computing and Information Systems Communications Engineering, Networks
Content Type	Text
Resource Type	Article
Subject	Computer Networks and Communications Information Systems Safety, Risk, Reliability and Quality Software

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Toward a secure Kerberos key exchange with smart cards

Analyzing SLE 88 memory management security using Interacting State Machines

Reactively secure signature schemes

Computer security

Security in cloud computing

Link-time smart card code hardening

Broadcast encryption with dealership

Short collusion-secure fingerprint codes against three pirates

Practical chosen-ciphertext secure Hierarchical Identity-Based Broadcast Encryption

A framework for secure execution of software

Similar Documents

Toward a secure Kerberos key exchange with smart cards

Analyzing SLE 88 memory management security using Interacting State Machines

Reactively secure signature schemes

Computer security

Security in cloud computing

Link-time smart card code hardening

Broadcast encryption with dealership

Short collusion-secure fingerprint codes against three pirates

Practical chosen-ciphertext secure Hierarchical Identity-Based Broadcast Encryption

A framework for secure execution of software