The week's pick
Reseach Article
Dynamic Change Reporting of Platform Configuration
| International Journal of Computer Applications |
| Foundation of Computer Science (FCS), NY, USA |
| Volume 77 - Number 8 |
| Year of Publication: 2013 |
| Authors: Hoda Ghazaghi, Mohammad-ali Doostari |
10.5120/13416-1083
|
Hoda Ghazaghi, Mohammad-ali Doostari . Dynamic Change Reporting of Platform Configuration. International Journal of Computer Applications. 77, 8 ( September 2013), 29-36. DOI=10.5120/13416-1083
Abstract
TCG group introduced the Remote Attestation Protocol, which has a weak point that makes it vulnerable to a masquerade attack. In this paper, a new method is introduced for improving the security of this protocol against masquerading attacks. The security of the improved protocol is analyzed using AVISPA tools. Advantages of the improved protocol include a reduced number of messages and lower cost, which prevents useless communication. Furthermore, an improved mechanism for measuring and reporting the changes is recommended. Combining the above mentioned, improved protocol with the improved integrity measurement and reporting mechanism can solve the existing problem in certain critical applications.
References
- Aarthi Nagarajan, Vijay Varadharajan, Michael Hitchens, Eimear Gallery, 2009, Property Based Attestation and Trusted Computing: Analysis and Challenges, Third International Conference on Network and System Security. IEEE.
- Ahmad-Reza Sadeghi, 2008, Trusted Computing Special Aspects and Challenges, SOFSEM 2008, LNCS 4910. Springer-Verlag Berlin Heidelberg, 2008; pp. 98–117.
- David Safford, Mimi Zohar, A Trusted Linux Client (TLC), T. J. Watson Research Center IBM, Final report.
- Elaine Shi, Adrian Perrig, Leendert Van Doorn, 2005, BIND: A Fine-grained Attestation Service for Secure Distributed Systems, Security and Privacy, IEEE.
- E. Brickell, J. Camenisch, and L. Chen, 2004, Direct Anonymous Attestation, In Proceeding of the 11th ACM conference on computer and communication security, pp. 132-145.
- Frederic Stumpf, Omid Tafreschi, Patrick R¨oder, Claudia Eckert, December 2006, A Robust Integrity Reporting Protocol for Remote Attestation, Second Workshop on Advances in Trusted Computing (WATC '06 Fall), Tokyo, Japan.
- George Coker, Joshua Guttman, Peter Loscocco, Amy Herzog, June 2011, Principles of Remote Attestation, International Journal of Information Security - Special Issue:10th International Conference on Information and Communications Security, Springer-Verlag Berlin, Heidelberg, 2(10): 63-81.
- Reiner Sailer, 2011, Integrity Measurement Architecture (IMA), IBM research.
- Jan Camenisch, Better Privacy for Trusted Computing Platforms, Final report, IBM Research. Zurich Research Laboratory, CH-8803 R¨uschlikon, Switzerland.
- Liang Gu, Yueqiang Cheng, Xuhua Ding, Robert H. Deng, Yao Guo, Weizhong Shao, 2009, Remote Attestation on Function Execution.
- Luca Vigan, 2006, Automated Security Protocol Analysis with the AVISPA Tool, Electronic Notes in Theoretical Computer Science, Elsevier; 155:61-86.
- Martin Pirker, Ronald Toegl, Daniel Hein, Peter Danner, 2009 A PrivacyCA for Anonymity and Trust, Trust 2009, LNCS 5471. Springer-Verlag Berlin Heidelberg. pp, 101–119.
- Reiner Sailer, Xiaolan Zhang, Trent Jaeger, Leendert van Doorn, August 2004, Design and Implementation of a TCG-based Integrity Measurement Architecture, In 13th USENIX Security Symposium, IBM T. J. Watson Research Center.
- Reiner Sailer, Scarsdale, Leendert Peter van Doorn, Xiaolan Zhang, 2011, METHOD AND SYSTEM FOR MEASURING STATUS AND STATE OF REMOTELY EXECUTING PROGRAMS, International Business Machines corporation, assignee, United States Patent: US 7,882, 221 B2.
- Shane Balfe, Eimear Gallery, Chris J. Mitchell, Kenneth G. Paterson, 2008, Challenges for Trusted Computing, Final report, Royal Holloway: University of Londo.
- SHEN ChangXiang, ZHANG HuanGuo, WANG HuaiMin, WANG Ji, ZHAO Bo, YAN Fei, YU FaJiang, ZHANG LiQiang, XU MingDi, 2010, Research on trusted computing and its development, Science China Press and Springer-Verlag Berlin Heidelberg, 53: 405–433.
- Song Cheng, Liu Bing, Xin Yang, Yang Yixian , Li Zhongxian, Yin Han, 2009, A Security-Enhanced Remote Platform Integrity Attestation Scheme, IEEE.
- TCG Group, TPM Main Part 1 Design Principle [Internet], Specification Version 1. 2, July 2007, Available from: www. trustedcomputinggroup. org.
- Trent Jaeger, Reiner Sailer, Umesh Shankar, 2006, PRIMA: PolicyReduced Integrity Measurement Architecture, SACMAT'06, ACM, Lake Tahoe, California, USA.
- Xinwen Zhang, Songqing Chen, Ravi Sandhu, 2005, Enhancing Data Authenticity and Integrity in P2P Systems, George Mason University: IEEE internet computing.
- Yacine Gasmi, Ahmad-Reza Sadeghi, Patrick Stewin, Martin Unger, N. Asoka, 2007, Beyond Secure Channels, ACM workshop on Scalable trusted computing.
- Yan Jianhong, Peng Xinguang, 2010, Protocol for Dynamic Component-Property Attestation in Trusted Computing, Second International Conference on Networks Security, Wireless Communications and Trusted Computing, IEEE computer society, p. 369-372.
Index Terms
Keywords