基于实体行为的动态远程证明方案  

Dynamic Remote Attestation Scheme Based on Entity Behavior

作　　者：杨玉丽[1] 万小红[1] 

机构地区：[1]运城学院公共计算机教学部,山西运城044000

出　　处：《运城学院学报》2013年第2期74-78,共5页Journal of Yuncheng University

摘　　要：针对当前远程证明技术存在证明粒度粗,不能实时监控平台行为和验证效率低等问题,提出一种基于实体行为的远程证明方案(RABEB)。RABEB根据安全属性需求定义细粒度的度量对象——实体,通过实时截获系统调用序列组合表征实体行为,将对平台可信性的证明转化为对系统调用序列组合可信性的证明。采用主成分分析法对系统调用序列频率矩阵进行降维处理,从而提高网络传输速度,并根据降维后的频率矩阵生成基于软件行为的Merkle哈希树,以达到提高验证效率的目的。This paper proposed a remote attestation scheme based on the behavior of entities （ RABEB）, which was against the problems of coarse granularity, can not be real - time monitoring the platform＇s behavior and low verification efficiency and so on. RABEB defined fine - grained measure objects, called the entity, based on the needs of security attributes, and depicted the entity behavior by intercepting the system call se- quence combinations, which determined the trustworthiness of platform by the trustworthiness of the system call sequence combinations. It reduced the dimension of the system call sequence frequency matrix using principal component analys, thus, improved the network transmission speed, and generated the Merkle hash tree based on the software behavior to raise verification efficiency.

关 键 词：远程证明 实体行为 完整性度量 系统调用序列 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]