Trust and Trustworthy Computing

This volume contains the proceedings of the Third International Conference on Trust and Trustworthy Computing (TRUST), held at the Ritz-Carlton hotel in Berlin, Germany, June 21-23, 2010. TRUST is a rapidly growing forum for research on the technical and soc- economic aspects of trustworthy infrastructures. TRUST provides an interdis- plinary forum for researchers, practitioners, and decision makers to explore new ideas and discuss experiences in building, designing, using, and understanding trustworthy computing systems. The third edition of TRUST welcomed manuscripts in two di?erent tracks: a Technical Strand and a Socio-economic Strand. We assembled an engaging program with 21 peer-reviewed technical papers and nine peer-reviewed soc- economic papers; eight keynotes from industry, academia, and government; and panel discussions on privacy and standards. In addition, this year, TRUST was co-located with four workshops: Trust in Cloud, Hardware Security, Emerging and Future Risks, and Anonymous Signatures. We would like to thank numerous individuals for their e?ort and contri- tion to the conference and for making TRUST 2010 possible: the Organizing Committee members-Nadine Palacios and Marcel Winandy-for their trem- dous help with all aspects of the organization;the Technicaland Socio-economic Program Committee members, whose names are listed on the following pages, together with the names of external reviewers who helped us in the process of selecting manuscripts to be included in the conference proceedings; the keynote and invited speakers; and the invited panel speakers.

Inhalt

Technical Strand-Full Papers.- Beyond Kernel-Level Integrity Measurement: Enabling Remote Attestation for the Android Platform.- SBAP: Software-Based Attestation for Peripherals.- Key Attestation from Trusted Execution Environments.- Anonymous Authentication with TLS and DAA.- Group-Based Attestation: Enhancing Privacy and Management in Remote Attestation.- Towards a Trusted Mobile Desktop.- Application of Trusted Computing in Automation to Prevent Product Piracy.- Lagrangian E-Voting: Verifiability on Demand and Strong Privacy.- ?TSS - A Simplified Trusted Software Stack.- Requirements for an Integrity-Protected Hypervisor on the x86 Hardware Virtualized Architecture.- A DAA Scheme Using Batch Proof and Verification.- A Pairing-Based DAA Scheme Further Reducing TPM Resources.- An Anonymous Attestation Scheme with Optional Traceability.- Introducing the Trusted Virtual Environment Module: A New Mechanism for Rooting Trust in Cloud Computing.- SegSlice: Towards a New Class of Secure Programming Primitives for Trustworthy Platforms.- Technical Strand-Short Papers.- Escrowed Data and the Digital Envelope.- Engineering Attestable Services.- Dynamic Enforcement of Platform Integrity.- An Improved Memory Integrity Protection Scheme.- Robust Combiners for Software Hardening.- The PUF Promise.- Socio-Economic Strand.- Privacy Requirements Engineering for Trustworthy e-Government Services.- Can Competitive Insurers Improve Network Security?.- Nudge: Intermediaries' Role in Interdependent Network Security.- How the Public Views Strategies Designed to Reduce the Threat of Botnets.- Axiomatic and Behavioural Trust.- The Leap of Faith from Online to Offline: An Exploratory Study of Couchsurfing.org.- The Role of Soft Information in Trust Building: Evidence from Online Social Lending.- Software on the Witness Stand: What Should It Take for Us to Trust It?.- Workshop on Trust in the Cloud.- Token-Based Cloud Computing.- Workshop on Security Hardware.- Oblivious Transfer Based on Physical Unclonable Functions.