Papers
www.cs.dartmouth.edu/~sws/abstracts/msmw03.shtml
Last modified: Thursday, 04-Dec-2003 12:37:32 EST

Rich MacDonald, Sean W. Smith, John Marchesini, Omen Wild.
Bear: An Open-Source Virtual Secure Coprocessor based on TCPA
Technical Report TR2003-471, Department of Computer Science, Dartmouth College.
August 2003.

Abstract

This paper reports on our ongoing project to use TCPA to transform a desktop Linux machine into a virtual secure coprocessor: more powerful but less secure than higher-end devices. We use TCPA hardware and modified boot loaders to protect fairly static components, such as a trusted kernel; we use an enforcer module---configured as Linux Security Module---to protected more dynamic system components; we use an encrypted loopback filesystem to protect highly dynamic components.

All our code is open source and available under GPL from http://enforcer.sourceforge.net/

See Also

A subsequent report extends this work.

Download

PDF

Code

Back to home page Maintained by Sean Smith, sws@cs.dartmouth.edu