基于嵌入式可信平台的运行时监控方法

孙召昌; 马建峰; 孙聪; 卢笛

doi:10.11959/j.issn.2096-109x.2017.00209

您当前的位置：

首页 >

文章列表页 >

基于嵌入式可信平台的运行时监控方法

学术论文 | 更新时间：2024-06-03

- 基于嵌入式可信平台的运行时监控方法
- Approach on runtime monitoring based on the embedded trusted platforms
- 网络与信息安全学报 2017年3卷第10期页码：44-51
- 作者机构：
- 作者简介：
  
  [ "孙召昌（1992-），男，河北邢台人，西安电子科技大学硕士生，主要研究方向为可信计算、运行时监控。" ]
  [ "马建峰（1963-），男，陕西西安人，西安电子科技大学教授、博士生导师，主要研究方向为密码学、无线和移动安全。" ]
  [ "孙聪（1982-），男，陕西兴平人，博士，西安电子科技大学副教授，主要研究方向为信息流安全、可信软件。" ]
  [ "卢笛（1983-），男，陕西安康人，博士，西安电子科技大学讲师，主要研究方向为云计算、网络与系统安全。" ]
- 基金信息：
  
  国家自然科学基金资助项目;The National Natural Science Foundation of China(61303033);国家自然科学基金资助项目;The National Natural Science Foundation of China(U1405255);国家高技术研究发展计划（“863”计划）基金资助项目(2015AA017203);陕西省自然科学基础研究计划基金资助项目(2016JM6034);航空科学基金资助项目;The Aviation Science Foundation of China(20141931001);工信部某专项科研基金资助项目;The Special Research Foundation of MIIT(MJ-2014-S-37)
- DOI：10.11959/j.issn.2096-109x.2017.00209
  中图分类号： TP393
- 网络首发：2017-10，
  
  纸质出版：2017-10-15
- 稿件说明：
移动端阅览
孙召昌, 马建峰, 孙聪, 等. 基于嵌入式可信平台的运行时监控方法[J]. 网络与信息安全学报, 2017,3(10):44-51.

Zhao-chang SUN, Jian-feng MA, Cong SUN, et al. Approach on runtime monitoring based on the embedded trusted platforms[J]. Chinese Journal of Network and Information Security, 2017, 3(10): 44-51.
孙召昌, 马建峰, 孙聪, 等. 基于嵌入式可信平台的运行时监控方法[J]. 网络与信息安全学报, 2017,3(10):44-51. DOI： 10.11959/j.issn.2096-109x.2017.00209.

Zhao-chang SUN, Jian-feng MA, Cong SUN, et al. Approach on runtime monitoring based on the embedded trusted platforms[J]. Chinese Journal of Network and Information Security, 2017, 3(10): 44-51. DOI： 10.11959/j.issn.2096-109x.2017.00209.

摘要

当前可信计算平台缺乏对自身运行时安全属性的监控，对此，提出一种针对嵌入式可信平台的运行时监控方法。通过自动化的代码插入和运行时实时监控，保证可信平台的运行时安全功能符合设计规范，并保证系统性能和运行状态符合特定条件约束，同时对相应的异常进行实时处理。实验结果表明，随着监控节点数的增长，监控的准确性和实时性提高，而监控开销和异常处理开销处于合理范围。

Abstract

The state-of-art trusted computing platforms fall short of monitoring its own runtime security properties.In order to mitigate these problems

an approach on runtime monitoring for the embedded trusted platforms was proposed.With the automated code instrumentation and the runtime monitoring

that the runtime security functionalities were consistent with the design specifications of trusted computing platforms could be made sure.The system performance and states meet specific constraints could also be ensured.The runtime exceptions on the specific properties were handled in real-time.The experimental results show that with the increase on the number of monitoring nodes

the precision and real-time performance of proposed runtime monitoring increase.Meanwhile

the costs on the monitoring and the exception handling are moderate.

关键词

Keywords

references

Trusted computing group.TCG specification architecture overview [EB/OL ] . http://www.trustedcomputinggroup.org/resources/tcg_architecture_overview_version_14 http://www.trustedcomputinggroup.org/resources/tcg_architecture_overview_version_14 .

WANG X , MIZUNO M , NEILSEN M , et al . Secure RTOS architecture for building automation [C ] // ACM Workshop on Cyber-Physical Systems-Security and/or Privacy . 2015 : 79 - 90 .

YU Z , WANG Q , ZHANG W , et al . A cloud certificate authority architecture for virtual machines with trusted platform module [C ] // IEEE International Conference on High Performance Computing and Communications . 2015 : 1377 - 1380 .

TIAN J , BUTLER K , MCDANIEL P , et al . Securing ARP from the ground up [C ] // The 5th ACM Conference on Data and Application Security and Privacy . 2015 : 305 - 312 .

SHAO J，QIN Y , FENG D , et al . Formal analysis of enhanced authorization in the TPM 2.0 [C ] // The 10th ACM Symposium on Information,Computer and Communications Security . 2015 : 273 - 284 .

WANG W , QIN Y , FENG D . Automated proof for authorization protocols of TPM 2.0 in computational model information security practice and experience [M ] . Berlin:Springer . 2014 144 - 158 .

DELAUNE S , KREMER S , RYAN M D , et al . A formal analysis of authentication in the TPM [C ] // The International Conference on Formal Aspects of Security and Trust . 2010 : 111 - 125 .

BAIER C , KATOEN J . Principles of model checking [M ] . London : The MIT PressPress , 2008 : 595 - 663 .

NAVABPOUR S , JOSHI Y , WU W , et al . RiTHM:a tool for enabling time-triggered runtime verification for C programs [C ] // Joint Meeting on Foundations of Software Engineering . 2013 : 603 - 606 .

BIEMAN J M , DREILINGER D , LIN L . Using fault injection to increase software test coverage [C ] // The Seventh International Symposium on Software Reliability Engineering,IEEE Computer Society . 1996 :166.

浏览量

1346

下载量

CSCD

文章被引用时，请邮件提醒。

提交

工具集

关联资源

SGX在可信计算中的应用分析

基于TPCM的容器云可信环境研究

基于TPCM的服务器可信PXE启动方法

面向第三方的云平台可信性在线评测及分析技术

基于加密SD卡的内网移动终端可信接入方案