Usability and Security of Trusted Platform Module (TPM) Library APIs

Siddharth Prakash Rao, Gabriela Limonta, Janne Lindqvist

Tutkimustuotos: Artikkeli kirjassa/konferenssijulkaisussaConference contributionScientificvertaisarvioitu

30 Lataukset (Pure)

Abstrakti

Trusted Platform Modules (TPMs) provide a hardwarebased root of trust and secure storage and help verify their host's integrity. Software developers can interact with a TPM and utilize its functionalities using standardized APIs that various libraries have implemented. We present a qualitative study (n=9) involving task analysis and cognitive interviews that uncovered several usability and security issues with tpm2-tools, one of the widely used TPM library APIs. Towards this end, we implemented a study environment that we will release as open source to support further studies. Our results support two major conclusions: 1) tpm2-tools APIs, as designed, are not designed to be developer-friendly, and 2) One of the major causes for these usability issues is in the TPM specifications. Since other libraries also mirror the specifications and provide no significant usability improvements, our results are likely to indicate similar issues with all current TPM library APIs. We provide recommendations for improving the TPM library APIs documentation and software, and we highlight the need for HCI experts to review TPM specifications to preemptively address usability pitfalls.

AlkuperäiskieliEnglanti
OtsikkoProceedings of the 18th Symposium on Usable Privacy and Security, SOUPS 2022
KustantajaUSENIX -The Advanced Computing Systems Association
Sivut213-232
Sivumäärä20
ISBN (elektroninen)978-1-939133-30-4
TilaJulkaistu - 2022
OKM-julkaisutyyppiA4 Artikkeli konferenssijulkaisussa
TapahtumaSymposium on Usable Privacy and Security - Boston, Yhdysvallat
Kesto: 7 elok. 20229 elok. 2022
Konferenssinumero: 18

Conference

ConferenceSymposium on Usable Privacy and Security
LyhennettäSOUPS
Maa/AlueYhdysvallat
KaupunkiBoston
Ajanjakso07/08/202209/08/2022

Sormenjälki

Sukella tutkimusaiheisiin 'Usability and Security of Trusted Platform Module (TPM) Library APIs'. Ne muodostavat yhdessä ainutlaatuisen sormenjäljen.

Siteeraa tätä