Approach on runtime monitoring based on the embedded trusted platforms

Zhao-chang SUN; Jian-feng MA; Cong SUN; Di LU

doi:10.11959/j.issn.2096-109x.2017.00209

您当前的位置：

首页 >

文章列表页 >

Approach on runtime monitoring based on the embedded trusted platforms

Papers | 更新时间：2024-06-03

- Approach on runtime monitoring based on the embedded trusted platforms
- Chinese Journal of Network and Information Security Vol. 3, Issue 10, Pages: 44-51(2017)
- 作者机构：
- 作者简介：
- 基金信息：
- DOI：10.11959/j.issn.2096-109x.2017.00209
  CLC： TP393
- Online First：2017-10，
  
  Published：15 October 2017
- 稿件说明：
移动端阅览
Zhao-chang SUN, Jian-feng MA, Cong SUN, et al. Approach on runtime monitoring based on the embedded trusted platforms[J]. Chinese Journal of Network and Information Security, 2017, 3(10): 44-51.
DOI：

Zhao-chang SUN, Jian-feng MA, Cong SUN, et al. Approach on runtime monitoring based on the embedded trusted platforms[J]. Chinese Journal of Network and Information Security, 2017, 3(10): 44-51. DOI： 10.11959/j.issn.2096-109x.2017.00209.

摘要

当前可信计算平台缺乏对自身运行时安全属性的监控，对此，提出一种针对嵌入式可信平台的运行时监控方法。通过自动化的代码插入和运行时实时监控，保证可信平台的运行时安全功能符合设计规范，并保证系统性能和运行状态符合特定条件约束，同时对相应的异常进行实时处理。实验结果表明，随着监控节点数的增长，监控的准确性和实时性提高，而监控开销和异常处理开销处于合理范围。

Abstract

The state-of-art trusted computing platforms fall short of monitoring its own runtime security properties.In order to mitigate these problems

an approach on runtime monitoring for the embedded trusted platforms was proposed.With the automated code instrumentation and the runtime monitoring

that the runtime security functionalities were consistent with the design specifications of trusted computing platforms could be made sure.The system performance and states meet specific constraints could also be ensured.The runtime exceptions on the specific properties were handled in real-time.The experimental results show that with the increase on the number of monitoring nodes

the precision and real-time performance of proposed runtime monitoring increase.Meanwhile

the costs on the monitoring and the exception handling are moderate.

关键词

Keywords

references

Trusted computing group.TCG specification architecture overview [EB/OL ] . http://www.trustedcomputinggroup.org/resources/tcg_architecture_overview_version_14 http://www.trustedcomputinggroup.org/resources/tcg_architecture_overview_version_14 .

WANG X , MIZUNO M , NEILSEN M , et al . Secure RTOS architecture for building automation [C ] // ACM Workshop on Cyber-Physical Systems-Security and/or Privacy . 2015 : 79 - 90 .

YU Z , WANG Q , ZHANG W , et al . A cloud certificate authority architecture for virtual machines with trusted platform module [C ] // IEEE International Conference on High Performance Computing and Communications . 2015 : 1377 - 1380 .

TIAN J , BUTLER K , MCDANIEL P , et al . Securing ARP from the ground up [C ] // The 5th ACM Conference on Data and Application Security and Privacy . 2015 : 305 - 312 .

SHAO J，QIN Y , FENG D , et al . Formal analysis of enhanced authorization in the TPM 2.0 [C ] // The 10th ACM Symposium on Information,Computer and Communications Security . 2015 : 273 - 284 .

WANG W , QIN Y , FENG D . Automated proof for authorization protocols of TPM 2.0 in computational model information security practice and experience [M ] . Berlin:Springer . 2014 144 - 158 .

DELAUNE S , KREMER S , RYAN M D , et al . A formal analysis of authentication in the TPM [C ] // The International Conference on Formal Aspects of Security and Trust . 2010 : 111 - 125 .

BAIER C , KATOEN J . Principles of model checking [M ] . London : The MIT PressPress , 2008 : 595 - 663 .

NAVABPOUR S , JOSHI Y , WU W , et al . RiTHM:a tool for enabling time-triggered runtime verification for C programs [C ] // Joint Meeting on Foundations of Software Engineering . 2013 : 603 - 606 .

BIEMAN J M , DREILINGER D , LIN L . Using fault injection to increase software test coverage [C ] // The Seventh International Symposium on Software Reliability Engineering,IEEE Computer Society . 1996 :166.

Views

1346

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Application progress of SGX in trusted computing area

Research on the trusted environment of container cloud based on the TPCM

TPCM-based trusted PXE boot method for servers

Trusted platform for third-party cloud computing online evaluation and analysis technology

Trusted access scheme for intranet mobile terminal based on encrypted SD card

Related Author

Yang AN

Anqi YUAN

Bo ZHAO

Zheng LI

Ping YANG

Jianbiao ZHANG

Guojie LIU

Jianbiao ZHANG

Related Institution

School of Computer Science, Wuhan University

School of Cyber Science and Engineering, Wuhan University

Beijing Information Science and Technology University

Beijing Key Laboratory of Trusted Computing

Faculty of Information Technology, Beijing University of Technology

⁰