TY - GEN
T1 - Lightweight attestation and secure code update for multiple separated microkernel tasks
AU - Wagner, Steffen
AU - Krauß, Christoph
AU - Eckert, Claudia
N1 - Publisher Copyright:
© Springer International Publishing Switzerland 2015.
PY - 2015
Y1 - 2015
N2 - By implementing all non-essential operating system services as user space tasks and strictly separating those tasks, a microkernel can effectively increase system security. However, the isolation of tasks does not necessarily imply their trustworthiness. In this paper, we propose a microkernel-based system architecture enhanced with a multi-context hardware security module (HSM) that enables an integrity verification, anomaly detection, and efficient lightweight attestation of multiple separated tasks. Our attestation protocol, which we formally verified using the automated reasoning tool ProVerif, implicitly proves the integrity of multiple tasks, efficiently communicates the result to a remote verifier, and enables a secure update protocol without the need for digital signatures that require computationally expensive operations.
AB - By implementing all non-essential operating system services as user space tasks and strictly separating those tasks, a microkernel can effectively increase system security. However, the isolation of tasks does not necessarily imply their trustworthiness. In this paper, we propose a microkernel-based system architecture enhanced with a multi-context hardware security module (HSM) that enables an integrity verification, anomaly detection, and efficient lightweight attestation of multiple separated tasks. Our attestation protocol, which we formally verified using the automated reasoning tool ProVerif, implicitly proves the integrity of multiple tasks, efficiently communicates the result to a remote verifier, and enables a secure update protocol without the need for digital signatures that require computationally expensive operations.
KW - Lightweight attestation
KW - Microkernel tasks
KW - Multi-context hardware security module
KW - Trusted platform module
UR - https://www.scopus.com/pages/publications/84955282026
U2 - 10.1007/978-3-319-27659-5_2
DO - 10.1007/978-3-319-27659-5_2
M3 - Conference contribution
AN - SCOPUS:84955282026
SN - 9783319276588
T3 - Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
SP - 20
EP - 36
BT - Information Security - 16th International Conference, ISC 2013, Proceedings
A2 - Desmedt, Yvo
PB - Springer Verlag
T2 - 16th International Conference on Information Security, ISC 2013
Y2 - 13 November 2013 through 15 November 2013
ER -