USING NGSCB TO MITIGATE EXISTING SOFTWARE THREATS

摘要

We introduce Microsoft's Next-Generation Secure Computing Base (NGSCB), and present a novel metaphor to describe it. An existing software application providing electronic legal document services is discussed, and results of a security analysis presented. The existing software architecture is extended with NGSCB to solve some noted security vulnerabilities. The novel architecture is then analysed for its successes and shortcomings.