Semantic remote attestation: a virtual machine directed approach to trusted computing

Vivek Haldar, Deepak Chandra, Michael Franz

Frontiers in Genetics · 2004 · 255 citations · 17 references

Concepts

TL;DR

Remote attestation is a core trusted computing function, yet existing static techniques are inexpressive and incompatible with heterogeneous distributed environments. The authors propose semantic remote attestation to overcome these limitations. They employ language‑based virtual machines to attest complex, dynamic, high‑level program properties in a platform‑independent manner. A prototype framework demonstrates that semantic remote attestation enables novel trust‑distribution applications, such as a peer‑to‑peer network protocol and a distributed computing system.

Abstract

Remote attestation is one of the core functionalities provided by trusted computing platforms. It holds the promise of enabling a variety of novel applications. However, current techniques for remote attestation are static, inexpressive and fundamentally incompatible with today's heterogeneous distributed computing environments and commodity open systems. Using language-based virtual machines enables the remote attestation of complex, dynamic, and high-level program properties - in a platform-independent way. We call this semantic remote attestation. This enables a number of novel applications that distribute trust dynamically. We have implemented a prototype framework for semantic remote attestation, and present two example applications built on it - a peer-to-peer network protocol, and a distributed computing application.

References

17