Remote Attestation of Attribute Updates and Information Flows in a UCON System

UCON is a highly flexible and expressive usage control model which allows an object owner to specify detailed usage control policies to be evaluated on a remote platform. Assurance of correct enforcement is mandatory for the establishment of trust on the remote platform claiming to implement UCON. Without such an assurance, there is no way of knowing whether the policies attached to the objects will be enforced as expected. Remote attestation, an important component of Trusted Computing, is highly suitable for establishing such an assurance. Existing approaches towards remote attestation work at a very coarse-grained level and mostly only measure binary hashes of the applications on the latform. Solutions at this level of abstraction cannot provide assurance to a challenger regarding behavior of a remote platform concerning enforcement of the owner’s policies. In this paper, we provide a new remote attestation technique which allows a challenger to verify two important behaviors of ...

• Type: Conference
• Year: 2009
• Where: TRUST
• Authors: Mohammad Nauman, Masoom Alam, Xinwen Zhang, Tamleek Ali
• Keywords: Applied Computing, Remote Attestation, Remote Platform, TRUST 2009, UCON