Trust but verify: accountability for network services Export

@inproceedings{citeulike:3446085, abstract = {This paper promotes accountability as a central design goal for dependable networked systems. We define three properties for accountable systems that extend beyond the basic security properties of authentication, privacy, and integrity. These accountability properties reduce the vulnerability of network services to subversion, tampering, corruption, and abuse. For example, actions taken in accountable systems and their clients are provable or even legally binding, to support contractual relationships in federated systems.We propose a framework for accountable network services, and explore its applicability and limitations. The foundation of our approach is to preserve digitally signed records of actions and/or internal state snapshots of each service, and use them to detect tampering, verify the consistency of actions and behavior, and prove responsibility for unexpected states or actions. We outline the key challenges in generalizing the principles and methodology of accountable design for practical use.}, address = {New York, NY, USA}, author = {Yumerefendi, Aydan R. and Chase, Jeffrey S.}, booktitle = {EW11: Proceedings of the 11th workshop on ACM SIGOPS European workshop}, citeulike-article-id = {3446085}, citeulike-linkout-0 = {http://portal.acm.org/citation.cfm?id=1133585}, citeulike-linkout-1 = {http://dx.doi.org/10.1145/1133572.1133585}, doi = {10.1145/1133572.1133585}, keywords = {accountability, network\_services, records, signature}, location = {Leuven, Belgium}, posted-at = {2009-10-29 20:55:30}, priority = {2}, publisher = {ACM}, title = {Trust but verify: accountability for network services}, url = {http://dx.doi.org/10.1145/1133572.1133585}, year = {2004} }

TY - CONF ID - citeulike:3446085 L3 - citeulike-article-id:3446085 N2 - This paper promotes accountability as a central design goal for dependable networked systems. We define three properties for accountable systems that extend beyond the basic security properties of authentication, privacy, and integrity. These accountability properties reduce the vulnerability of network services to subversion, tampering, corruption, and abuse. For example, actions taken in accountable systems and their clients are provable or even legally binding, to support contractual relationships in federated systems.We propose a framework for accountable network services, and explore its applicability and limitations. The foundation of our approach is to preserve digitally signed records of actions and/or internal state snapshots of each service, and use them to detect tampering, verify the consistency of actions and behavior, and prove responsibility for unexpected states or actions. We outline the key challenges in generalizing the principles and methodology of accountable design for practical use. CY - Leuven, Belgium AD - New York, NY, USA TI - Trust but verify: accountability for network services PB - ACM T2 - EW11: Proceedings of the 11th workshop on ACM SIGOPS European workshop KW - accountability KW - network_services KW - records KW - signature AU - Yumerefendi, Aydan AU - Chase, Jeffrey PY - 2004/// UR - http://dx.doi.org/10.1145/1133572.1133585 ER -