Terra: a virtual machine-based platform for trusted computing

By Tal Garfinkel, Ben Pfaff, Jim Chow, Mendel Rosenblum, Dan Boneh. Symposium on Operating Systems Principles, 2003

1,170 citations recorded by the source corpus.

Subfields: Artificial Intelligence, Information Systems, Signal Processing

View Paper: https://www.semanticscholar.org/paper/2588e41e4cd9442387791325d241649ff13af33c

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

In Artificial Intelligence

In Information Systems

In Signal Processing

Citations in the corpus

Aegis: A Single-Chip Secure Processor (2007, background): “proposed Terra [37], a virtual machine based architecture for trusted computing.”
Microreboot - A Technique for Cheap Recovery (2004, background): “scuss a small sample of work related to these themes. Separation of control and data is key to reboot-basedrecovery. There are many ways to isolate subsystems (e.g., using processes, virtual machines [17], microkernels [25], protection domains [41], etc.). Isolated processing components appeared als”
Automated detection of persistent kernel control-flow attacks (2007, methodology): “Unlike attestation-based techniques [18, 13, 30, 27, 28, 31], which measure code and data at load time, Pioneer is capable of running arbitrary procedures in a trusted manner.”
vTPM: Virtualizing the Trusted Platform Module (2006, background): “The Terra project [7] investigated trusted virtual machine monitors.”
Privacy as a Service: Privacy-Aware Data Storage and Processing in Cloud Computing Architectures (2009, methodology): “[24] utilized cryptographic coprocessors for implementing trusted virtual machine monitors on top of untrusted operating systems.”
Comprehensive formal verification of an OS microkernel (2014, background): “2002], the use of small hypervisors as a minimal trust base [Garfinkel et al. 2003; Singaravelu et al. 2006; Seshadri et al. 2007; Criswell et al. 2007], as well as systems that require the use of type-safe languages for all code except some “dirty” core [Bershad et al.”
TrustVisor: Efficient TCB Reduction and Attestation (2010, methodology): “We have implemented TrustVisor to protect security-sensitive code blocks while imposing less than 7% overhead on the legacy OS and its applications in the common case.”
Vehicular Networking: A Survey and Tutorial on Requirements, Architectures, Challenges, Standards and Solutions (2011, background): “Some examples can be found in [110], [111].”
Trusted Execution Environment: What It is, and What It is Not (2015, background): “1) Ben Pfaff, Terra, 2003 [3] The TEE is a “dedicated closed virtual machine that is isolated from the rest of the platform.”
Accountable Virtual Machines (2010, methodology): “A trusted computing platform can be used to detect if a node is running modified software [17, 30].”
Passive Data Link Layer 802.11 Wireless Device Driver Fingerprinting (2006, background): “These factors and the fact that drivers are often developed by programmers who lack intimate knowledge of the operating system kernel contribute to the disproportionately high number of bugs found in device drivers [3].”
Guest-Transparent Prevention of Kernel Rootkits with VMM-Based Memory Shadowing (2008, background): “This assumption is shared by many other VMM-based security research efforts [16, 18 , 19, 22, 23, 24].”
Cross-VM side channels and their use to extract private keys (2012, background): “…underlies the security of public cloud computing systems [6, 39] such as Amazon EC2, Microsoft Windows Azure, and Rackspace; military multi-level security environments [29]; home user and enterprise desktop security in the face of compromise [20]; and software-based trusted computing [22].”
Intel ® Virtualization Technology for Directed I/O (2006, background): “While not as complex as a full modern OS, a mature hypervisor-based VMM can grow to a significant size over time, gradually compromising some of the benefits noted earlier (e.g., improved security through limiting the size of the TCB).”
HyperSentry: enabling stealthy in-context measurement of hypervisor integrity (2010, background): “…{amazab, pning, zhi_wang, xuxian_jiang}@ncsu.edu Xiaolan Zhang IBM T.J. Watson Research Center cxzhang@us.ibm.com ABSTRACT This paper presents HyperSentry, a novel framework to enable integrity measurement of a running hypervisor (or any other highest privileged software layer on a system).”