Abstract:   Businesses are increasingly worried about leaks of confidential data that can results from the theft, accidental loss and decommissioning of data-storage devices, such as laptops and server hard disks. Previous secure storage technologies have not gained wide acceptance and often have serious shortcomings. In this lecture, I explain the security requirements for encrypted storage and give an overview of the previous encrypted storage systems including their weaknesses. I’ll then explain how trusted computing technologies enable a new trade-off between security and usability, which makes the deployment of data encryption much more attractive to business users. These mechanisms are available in the BitLocker file encryption in Windows Vista and will be in the upcoming Longhorn Server.

Talk: Trusted Computing on Linux : Tweaks and Tips
by Seiji Munetoh, IBM Research

Abstract:   The setup procedure of Trusted Computing on Linux is introduced at this lecture. The detail of TCG capabilities supported by BIOS, bootloader, Linux-kernel, Xen-hipervisor and TSS (TrouSerS) are also explained. An integrity and configuration management is still a difficult problem, we consider it based on above actual implementation.

Talk: Trusted Full Disk Encryption Solution
by Dr Wang Zi , Sinosun Technology Ltd

Abstract:    With more and more mobile computers used, the risk of data theft is growing rapidly. The need for secure data storage, especially on hard-disks, is thus becoming a major concern.   Many available solutions encrypt only a part of the hard drive, leaving key files such as the operating system vulnerable. Full-disk encryption (FDE) is a process that encrypts everything on a disk without user action. This includes the operating system, swap file and any temporary files. These last two can often leak important confidential data to a hacker.  

So why don't we encrypt our data as a matter of course? Full Disk Encryption (FDE) provides a secure basis for keeping data confidential – whether it is corporate or personal. If your laptop is stolen, FDE protects all of the information stored on it. This can include your company’s own intellectual property, as well as the confidential or private information belonging to others, to which you or your corporation has been entrusted and for which your company is legally responsible.   

FDE additionally reduces the cost of security management, as hard disks can be repurposed or discarded with no risk of residual data being exposed.  

FDE can give user a lot of values, but some fail to recognize that encryption is only as secure as the authentication used to access it. Encryption without strong authentication is like locking your door and then leaving the key in the lock while you walk away. So we bring forward Trusted Full Disk Encryption. By virtue of Trusted Platform Module (TPM), we can realize strong authentication and secure key management. TPM is a hardware chip embedded on the motherboard, so need no extra external device for users, at the same time, TPM is more and more popular.

Talk:  Open TC
by Dirk Kuhlmann, HP Laboratories

Abstract:   OpenTC is a industrial-academic research project funded by the European commission. It addresses combinations of Trusted Computing technology with virtualizaton layers based on Open Source software.

We will give an overview of the project's vision, its technical core concepts and its architecture. The current state of the design and implementation efforts will be presented. We will outline the promises and challenges encountered when basing a trust and security infrastructure on Open Source software, and discuss options for international cooperation in this area.

Talk:  Building Trust on the Internet via Global Collaboration
by Prof Sihan Qing, Institute of Software, Chinese Academy of Sciences

Abstract:   Internet has changed our daily life. It emerged as an information highway connecting more and more computers and people. We are witnessing a change of our society towards e-commerce, e-business and e-government and towards an increasing reliance on the Internet. In this presentation, I will cover the following topics: (1) Current status of the Internet applications and its security concerns; (2) Building trust on the Internet via global collaboration; (3) Some important technical issues, focusing on the discussion of security models and covert channel analysis, and (4) China’s contribution to the development of information security standards.

Talk:  Trusted Infrastructure Technology
by Vijay Varadharajan, Macquarie University, Australia

Abstract:   The notion of trust has long played a significant role in the development of secure distributed systems and services. A key design issue is the specification and management of security policies and their use in secure decision making. In this lecture, we will begin by first revisiting trusted computing technology and the need for higher level property based abstraction for specifying polices in trusted computing based systems. We will explore different levels of granularity of such policies and consider mechanisms for negotiation of these policies in the context of web service environment. Then we will go to argue the need for the trust policies to incorporate not only the “hard trust” properties (such as those based on state and credentials) but also “soft trust” properties (such as those based on reputation). We will consider a hybrid trust model comprising both “hard” and “soft” trust and describe the implementation of such a hybrid trust model in the context of a mobile agent system.

Talk:  Trusted Full Disk Encryption Solution
by Dr Wang Zi, Sinosun Technology Ltd 

Abstract:    With more and more mobile computers used, the risk of data theft is growing rapidly. The need for secure data storage, especially on hard-disks, is thus becoming a major concern.   Many available solutions encrypt only a part of the hard drive, leaving key files such as the operating system vulnerable. Full-disk encryption (FDE) is a process that encrypts everything on a disk without user action. This includes the operating system, swap file and any temporary files. These last two can often leak important confidential data to a hacker. 

So why don't we encrypt our data as a matter of course? Full Disk Encryption (FDE) provides a secure basis for keeping data confidential – whether it is corporate or personal. If your laptop is stolen, FDE protects all of the information stored on it. This can include your company’s own intellectual property, as well as the confidential or private information belonging to others, to which you or your corporation has been entrusted and for which your company is legally responsible.   FDE additionally reduces the cost of security management, as hard disks can be repurposed or discarded with no risk of residual data being exposed.  FDE can give user a lot of values, but some fail to recognize that encryption is only as secure as the authentication used to access it. Encryption without strong authentication is like locking your door and then leaving the key in the lock while you walk away. So we bring forward Trusted Full Disk Encryption. By virtue of Trusted Platform Module (TPM), we can realize strong authentication and secure key management. TPM is a hardware chip embedded on the motherboard, so need no extra external device for users, at the same time, TPM is more and more popular.

Talk: Towards Trusted Grid Computing
by Andrew Martin, Oxford University

Abstract: For Grid computing to succeed, the users need to be able to invest trust in systems they have never encountered before, and may not be able to identify individually. This talk will explain, with examples, some of the security requirements which arise in Grid computing, and some of the long-standing solutions to these. We will see that existing Grid systems have a large gap when it comes to system isolation, secure data storage, and attested execution environments. The technologies of Trusted Infrastructure have much potential to address those problems: we will explain our practical and long-term approaches.

Talk:   TCG-related activities in Japan - JEITA TC Committee
by Dr Hisanori Mishima, Hitachi 

Abstract:   From January 2007, TCG vendors in Japan organized a special interest group among TCG members for discussing TCG technology and use cases.   We introduce our group's overview and activities.  We would like to introduce one of our discussing items,  "new TCG usage cases".  This will help all of us to start considering  how TCG will change our today's IT systems.