返回
Hardware-Assisted Static and Runtime Attestation for Cloud Deployments
DOI:10.1109/TCC.2023.3327290.png)
摘要
En 中文
This article is devoted to the problems of static and runtime integrity for cloud deployments. Existing remote attestation solutions for cloud infrastructure do not cover static and dynamic attestation as a whole. They evaluate either the static or dynamic part, not considering the rest. We address this gap by proposing a runtime attestation process based on hardware CET technology, as an enhancement to static attestation enabled by SGX. We show how hardware-assisted protection for control-flow-related attacks can enhance virtual deployment security with minimal tradeoff. Our solution does not significantly increase the processing time. Moreover, a processing time can even be reduced when this mechanism is used as a default protection method against control-flow related attacks.
Keyword:
Runtime
Cloud computing
Hardware
Security
Software
Virtual machining
Virtual machine monitors
Control-flow enforcement technology (CET)
SGX
software guard extensions
static integrity
runtime integrity
期刊
I
IF:
5
论文数:
1.8K
被引数:
4.3K
机构
引用论文
State-of-the-Art Software-Based Remote Attestation: Opportunities and Open Issues for Internet of Things基于最先进软件的远程认证: 物联网的机遇和开放问题
SENSORS
IF3.5

