Model-Driven Remote Attestation: Attesting Remote System from Behavioral Aspect

• Main Authors: GU, Liang, DING, Xuhua, DENG, Robert H., ZOU, Yanzhen, XIE, Bing, SHAO, Weizhong, MEI, Hong
• Format: text
• Language: English
• Published: Institutional Knowledge at Singapore Management University 2008
• Subjects: Trusted computing; remote attestation; security policy; Information Security
• Online Access: https://ink.library.smu.edu.sg/sis_research/314; https://ink.library.smu.edu.sg/context/sis_research/article/1313/viewcontent/Model_Driven_Remote_Attestation_Attesting_Remote_pv.pdf
• Institution: Singapore Management University

Remote attestation was introduced in TCG specifications to determine whether a remote system is trusted to behave in a particular manner for a specific purpose; however, most of the existing approaches attest only the integrity state of a remote system and hence have a long way to go in achieving the above attestation objective. Behavior-based attestation and semantic attestation were recently introduced as solutions to approach the TCG attestation objective. In this paper, we extend behavior-based attestation to a model-driven remote attestation to prove that a remote system is trusted as defined by TCG. Our model-driven remote attestation verifies two compliance requirements to prove the trustworthiness of a remote system: expected behavior compliance and enforced behavior compliance.