基于策略的语义远程认证

远程认证在可信计算中起着重要作用,它能提供可信环境存在的可靠证据。目前的方法是测量目标平台的二进制码、配置文件、属性或者安全策略等可信值。所有这些认证方法是静态的,缺乏动态行为认证并且没有对于实际的行为进行说明和规范。为了改进和完善这些认证方式,提出了一种语义远程认证策略,并对其进行了定义、规范和证明。该策略是把使用控制模型和行为结合起来,能够动态测量远程平台的行为。

Policy-based Semantic Remote Attestation

Remote attestation plays an important role in trusted computing,which can provide reliable evidence for existence of a trusted environment.Existing approaches for the realization of remote attestation measure the trustworthiness of a target platform from its binaries,configurations,properties or security policies.All these approaches are static,and none of them define what a trusted behavior actually is and how to specify it.In this paper,we propose a novel attestation policy,which is based on the behavior....