2005 IEEE Symposium on Security and Privacy (S&P'05) Towards Constant Bandwidth Overhead Integrity Checking of Untrusted Data Oakland, California May 08-May 11 ISBN: 0-7695-2339-0
DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/SP.2005.24
We present an adaptive tree-log scheme to improve the performance of checking the integrity of arbitrarily-large untrusted data, when using only a small fixed-sized trusted state. Currently, hash trees are used to check the data. In many systems that use hash trees, programs perform many data operations before performing a critical operation that exports a result outside of the program's execution environment. The adaptive tree-log scheme we present uses this observation to harness the power of the constant runtime bandwidth overhead of a log-based scheme. For all programs, the adaptive tree-log scheme's bandwidth overhead is guaranteed to never be worse than a parameterizable worst case bound. Furthermore, for all programs, as the average number of times the program accesses data between critical operations increases, the adaptive tree-log scheme's bandwidth overhead moves from a logarithmic to a constant bandwidth overhead.
Citation:
Dwaine Clarke, G. Edward Suh, Blaise Gassend, Ajay Sudan, Marten van Dijk, Srinivas Devadas, "Towards Constant Bandwidth Overhead Integrity Checking of Untrusted Data," sp, pp.139-153, 2005 IEEE Symposium on Security and Privacy (S&P'05), 2005 Usage of this product signifies your acceptance of the Terms of Use. | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||