loading...
 This Article 
   
 Share 
   
 Bibliographic References 
   
 Add to: 
 
Digg
Furl
Spurl
Blink
Simpy
Google
Del.icio.us
Y!MyWeb
 
 Search 
   
2005 IEEE Symposium on Security and Privacy (S&P'05)
Towards Constant Bandwidth Overhead Integrity Checking of Untrusted Data
Oakland, California
May 08-May 11
ISBN: 0-7695-2339-0
Dwaine Clarke, Massachusetts Institute of Technology, Cambridge, MA
G. Edward Suh, Massachusetts Institute of Technology, Cambridge, MA
Blaise Gassend, Massachusetts Institute of Technology, Cambridge, MA
Ajay Sudan, Massachusetts Institute of Technology, Cambridge, MA
Marten van Dijk, Massachusetts Institute of Technology, Cambridge, MA
Srinivas Devadas, Massachusetts Institute of Technology, Cambridge, MA
We present an adaptive tree-log scheme to improve the performance of checking the integrity of arbitrarily-large untrusted data, when using only a small fixed-sized trusted state. Currently, hash trees are used to check the data. In many systems that use hash trees, programs perform many data operations before performing a critical operation that exports a result outside of the program's execution environment. The adaptive tree-log scheme we present uses this observation to harness the power of the constant runtime bandwidth overhead of a log-based scheme. For all programs, the adaptive tree-log scheme's bandwidth overhead is guaranteed to never be worse than a parameterizable worst case bound. Furthermore, for all programs, as the average number of times the program accesses data between critical operations increases, the adaptive tree-log scheme's bandwidth overhead moves from a logarithmic to a constant bandwidth overhead.
Citation:
Dwaine Clarke, G. Edward Suh, Blaise Gassend, Ajay Sudan, Marten van Dijk, Srinivas Devadas, "Towards Constant Bandwidth Overhead Integrity Checking of Untrusted Data," sp, pp.139-153, 2005 IEEE Symposium on Security and Privacy (S&P'05), 2005
Usage of this product signifies your acceptance of the Terms of Use.