Trusted distribution of software over the Internet

Author

Rubin, Aviel D.

Author_Institution

Bellcore, Morristown, NJ, USA

fYear

1995

fDate

16-17 Feb 1995

Firstpage

47

Lastpage

53

Abstract

The paper offers a solution to a problem of software distribution on the lnternet. The problem is that malicious software can be posted to the public with no accountability. When this software is run, it inherits the privileges of the user who runs it. Unfortunately, it is very common for users to execute software obtained on the Internet with no assurance that it is genuine. The solution offered here utilizes a trusted third party that signs certificates to identify the author of a program and to secure its integrity. A detailed design is provided. Finally, Bellcore´s Trusted Software Integrity (Betsi) System, an implementation of the design, is presented

Keywords

Internet; cryptography; data integrity; Bellcore´s Trusted Software Integrity System; Internet; certificate signing; integrity; malicious software; privileges; program author; trusted software distribution; trusted third party; Advertising; File systems; IEEE news; Microcomputers; Postal services; Software systems; Viruses (medical); Web and internet services;

fLanguage

English

Publisher

ieee

Conference_Titel

Network and Distributed System Security, 1995., Proceedings of the Symposium on

Conference_Location

San Diego, CA

Print_ISBN

0-8186-7027-4

Type

conf

DOI

10.1109/NDSS.1995.390646

Filename

390646