基于系统行为的计算平台可信证明  

System Behavior Based Trustworthiness Attestation for Computing Platform

作　　者：李晓勇[1] 左晓栋[2] 沈昌祥[3] 

机构地区：[1]北京交通大学,北京100044 [2]中国科学院研究生院,北京100049 [3]北京工业大学,北京100022

出　　处：《电子学报》2007年第7期1234-1239,共6页Acta Electronica Sinica

基　　金：国家973重点基础研究发展规划(No.G1999035801)

摘　　要：计算平台可信证明是可信计算研究的热点问题.但是目前一些计算平台可信证明方案存在隐私保护和可行性等方面的缺陷.基于系统行为的计算平台可信证明模型(BTAM)在可信计算环境下,根据可信行为期望策略,将平台状态证明转化为对平台历史行为序列的可信证明,有效地避免了在准确描述计算平台状态方面的难题,保证了模型实现的可行性和可扩展性,并且不会暴露证明平台的配置信息.BTAM的原型实现和实验性能分析证明了它在防范诸如计算机病毒、木马类恶意软件攻击以及避免安全策略冲突行为等方面的安全能力,以及良好的实际安全运行效率.Remote attestation for trustworthiness of computing platform is a focus research work in Trusted Computing, but there exist some problems in some of today＇ s attestation approaches. System Behavior based Trustworthiness Attestation Model （BTAM） is a trustworthiness attestation model based on system behavior of attesting computing platform in trusted computing environment. BTAM determines the trustworthiness of attesting platform by its behavior sequences against the platform behavior expectation policy,therefore it avoids the difficulties in describing the state of attesting platform,assures the feasibility and scalability in the model implementation. The prototype implementation of BTAM proves the capability of BTAM in defending malicious code such as Trojan and virus and eliminating security policy conflicted activities,and the run-time performance analysis also shows the high efficiency of BTAM in security.

关 键 词：可信计算 系统行为 可信证明 恶意软件 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]