Personal Secure Booting

Abstract

With the majority of security breaches coming from inside of organizations, and with the number of public computing sites, where users do not know the system administrators, increasing, it is dangerous to blindly trust system administrators to manage computers appropriately. However, most current security systems are vulnerable to malicious software modification by administrators. To solve this problem, we have developed a system called sAEGIS, which embraces a smart card as personal secure storage for computer component hashes, and uses the hashes in a secure booting process to ensure the integrity of the computer components.