Title
Cloud terminal: secure access to sensitive applications from untrusted systems
Abstract
Current PC- and web-based applications provide insufficient security for the information they access, because vulnerabilities anywhere in a large client software stack can compromise confidentiality and integrity. We propose a new architecture for secure applications, Cloud Terminal, in which the only software running on the end host is a lightweight secure thin terminal, and most application logic is in a remote cloud rendering engine. The secure thin terminal has a very small TCB (23 KLOC) and no dependence on the untrusted OS, so it can be easily checked and remotely attested to. The terminal is also general-purpose: it simply supplies a secure display and input path to remote software. The cloud rendering engine runs an off-the-shelf application in a restricted VM hosted by the provider, but resource sharing between VMs lets one server support hundreds of users. We implement a secure thin terminal that runs on standard PC hardware and provides a responsive interface to applications like banking, email, and document editing. We also show that our cloud rendering engine can provide secure online banking for 5-10 cents per user per month.
Year
Venue
Keywords
2012
USENIX Annual Technical Conference
secure thin terminal,cloud rendering engine,sensitive application,secure display,cloud terminal,remote software,secure application,large client software,current pc,untrusted system,secure access,remote cloud rendering engine,secure online banking,lightweight secure thin terminal
Field
DocType
Citations 
Client,Confidentiality,Computer science,Software,Application logic,Shared resource,Rendering (computer graphics),Operating system,Cloud computing
Conference
18
PageRank 
References 
Authors
0.91
19
10
Name
Order
Citations
PageRank
Lorenzo Martignoni157629.92
Pongsin Poosankam297539.96
Matei Zaharia39101407.89
Jun Han4180.91
Stephen McCamant5163874.34
Dawn Song67334385.37
Vern Paxson7140312130.20
Adrian Perrig8158421035.20
Scott Shenker9298922677.04
Scott Shenker10298922677.04