Bitfrost: the one laptop per child security model

ABSTRACT

We present an integrated security model for a low-cost laptop that will be widely deployed throughout the developing world. Implemented on top of Linux operating system, the model is designed to restrict the laptop's software without restricting the laptop's user.

REFERENCES

• 1: D. Bell and L. LaPadula. Secure computer systems: Mathematical foundations and model. report MTR 2547 v2. Technical report, MITRE, November 1973.
• 2: Crispin Cowan , Calton Pu , Dave Maier , Heather Hintony , Jonathan Walpole , Peat Bakke , Steve Beattie , Aaron Grier , Perry Wagle , Qian Zhang, StackGuard: automatic adaptive detection and prevention of buffer-overflow attacks, Proceedings of the 7th conference on USENIX Security Symposium, p.5-5, January 26-29, 1998, San Antonio, Texas
• 3: D. Crockford. RFC 4627: The application/json media type for javascript object notation (json), July 2006.
• 4: Peter Elbow. In defense of private writing. Written Communication, 16(2):139--170, 1999.
• 5: Simson Garfinkel. The pure software act of 2006. TechnologyReview.com, April 7 2004. http://simson.net/clips/2004/2004.TR.04.PureSoftware.pdf.
• 6: Simson L. Garfinkel , David D. Clark , Robert C. Miller, Design principles and patterns for computer systems that are simultaneously secure and usable, Massachusetts Institute of Technology, Cambridge, MA, 2005
• 7: Simson L. Garfinkel and Robert Miller. The johnny 2 standardized secure messaging scenario. In Symposium on Usable Privacy and Security. ACM Press, 2005.
• 8: Joseph A. Goguen and José Meseguer. Security policies and security models. In Proceedings of the Berkeley Conference on Computer Security, pages 11--22. IEEE CS Press, 1982.
• 9: Peter Gutmann. Why isn't the Internet secure yet, dammit. In AusCERT Asia Pacific Information Technology Security Conference 2004; Computer Security: Are we there yet? AusCERT, May 2004. http://www.cs.auckland.ac.nz/~pgut001/pubs/dammit.pdf.
• 10: Poul-Henning Kamp and Robert N. M. Watson. Jails: Confining the omnipotent root. In System Administration and Network Engineering (SANE) 2000. Stichting NLnet and USENIX, May 2000. http://docs.freebsd.org/44doc/papers/jail/jail.html.
• 11: Darko Kirovski , Milenko Drinić , Miodrag Potkonjak, Enabling trusted software integrity, Proceedings of the 10th international conference on Architectural support for programming languages and operating systems, October 05-09, 2002, San Jose, California
• 12: OLPC. Hardware specification, 2007. http://wiki.laptop.org/go/Hardware_specification.
• 13: OLPC. Sugar, 2007. http://wiki.laptop.org/go/Sugar.
• 14: Open firmware home page, 2007. http://www.openfirmware.org.
• 15: What is OpenID, 2007. http://openid.net.
• 16: Seymour Papert and Idit Harel. Constructionism. Ablex Publishing Corporation, 1991.
• 17: C. Partridge, A Proposed Flow Specification, RFC Editor, 1992
• 18: Brian Reid. Reflections on some recent widespread computer break-ins. Commun. ACM, 30(2):103--105, 1987. ISSN 0001-0782.
• 19: Marc Stiegler , Alan H. Karp , Ka-Ping Yee , Tyler Close , Mark S. Miller, Polaris: virus-safe computing for Windows XP, Communications of the ACM, v.49 n.9, p.83-88, September 2006 [doi>10.1145/1151030.1151033]
• 20: Snorri Sturluson. Edda. Everyman Paperback Classics, 1995.
• 21: Linux VServer. http://linux-vserver.org/.
• 22: David Woodhouse. The journaling flash file system, July 2001.
• 23: Ka-Ping Yee, User Interaction Design for Secure Systems, Proceedings of the 4th International Conference on Information and Communications Security, p.278-290, December 09-12, 2002
• 24: Ka-Ping Yee, Aligning Security and Usability, IEEE Security and Privacy, v.2 n.5, p.48-55, September 2004 [doi>10.1109/MSP.2004.64]

INDEX TERMS

Primary Classification:
  D. Software
  D.4 OPERATING SYSTEMS
      D.4.6 Security and Protection
          Subjects: Cryptographic controls

Additional Classification:
  H. Information Systems
  H.5 INFORMATION INTERFACES AND PRESENTATION (I.7)
      H.5.2 User Interfaces (D.2.2, H.1.2, I.3.6)
          Subjects: Evaluation/methodology

General Terms:
Security

Keywords:
Bitfrost, Linux, usability