Track 2: Integrated & Applied Trusted Computing Rapid Development and Evaluation of Trustworthy Solutions Will Keegan — LynuxWorks Trusted and trustworthy computing are often interpreted as synonymous concepts, but they must be regarded independently. Trustworthiness is established through the assessment of a platform implementation against a set of criteria to determine whether the platform is technically capable of fulfilling users' expectations in its operational environment. Trusted platforms are established by an authoritative decision that accepts the risk of platform failure in the operational environment. Ideally this decision would be based on an evaluation to demonstrate that the platform is trustworthy. However, platforms are often deemed trusted without appropriate assessment of trustworthiness when it is not technically or economically feasible to do so and the need for the platform's capabilities outweigh the risk of its failure. This problem of placing trust in untrustworthy platforms is very relevant in our current time of economic recession, in which authorities have limited resources to properly assess trustworthiness, while modern solutions are expected to offer new capabilities that entail increased complexity. This presentation proposes a technical development strategy that allows solution providers to rapidly build trustworthy solutions using separation kernels and the MILS architectural approach to ultimately reduce the cost of developing, evaluating, and maintaining solutions that must be trusted to support critical functions. The proposed strategy will identify the challenges of assessing trustworthiness, and introduces design criteria for a separation kernel that is trustworthy to host solutions that address the identified challenges. The proposed strategy will also walk through an example evaluation of a simple multilevel audio mixer to provide real-world context around the identified problems and proposed solutions. This track welcomes interactive discussion, counter arguments, and Q&A; from audience members with experience in system engineering, security evaluations, and assurance maintenance. Takeaways • A strategy to rapidly build and evaluate trustworthy systems using COTS components • Reduce cost of initial security evaluations • Improve reuse of evaluated trustworthy COTS components • Application of MILS architectural approach and separation kernels • Identify criteria for trustworthy separation kernels Mr. Keegan's presentation is available at: https://classic.regonline.com/custImages/360000/369552/TCC%20PPTs/TCC2013_Keegan.pdf More information can be found at http://www.trustedcomputingconference.com/ Wednesday, September 11

• published: 26 Sep 2013
• views: 6