SegSlice: Towards a New Class of Secure Programming Primitives for Trustworthy Platforms

The TPM is a fairly passive entity. As a result, it can be difficult to involve the TPM in measurements of software trustworthiness beyond simple load-time hashing of static program code. We suggest an approach to dynamic, runtime measurement of software trustworthiness properties as they relate to code-data owernship relationships. We outline a system, SegSlice, that actively involves the TPM in fine-grained labeling and measurement of code slices and the data that these slices operate on. SegSlice requires no changes to x86 hardware, and it relies on the relatively underused x86 segmentation mechanism to mediate access to data events.

• Type: Journal
• Year: 2010
• Where: TRUST
• Authors: Sergey Bratus, Michael E. Locasto, Brian Schulte
• Keywords: Measurement, Security Privacy, Software Trustworthiness, TRUST 2010, Underused X86 Segmentation