Network-Based Root of Trust for Installation

  • Authors:
  • Joshua Schiffman;Thomas Moyer;Trent Jaeger;Patrick McDaniel

  • Affiliations:
  • Pennsylvania State University;Pennsylvania State University;Pennsylvania State University;Pennsylvania State University

  • Venue:
  • IEEE Security and Privacy
  • Year:
  • 2011

Quantified Score

Hi-index 0.00

Visualization

Abstract

Administrators of large datacenters often require network installation mechanisms, such as disk cloning over the network, to manage the integrity of their machines. However, network-based installation is vulnerable to a variety of attacks, including compromised machines responding to installation requests with malware. To enable verification that running machines were installed correctly, the Network-Based Root of Trust for Installation (netROTI, for short) binds the state of a system to its installer and disk image. Evaluation results show that a netROTI installation adds about 8 seconds overhead plus 3 percent of image download time to a standard network install and thwarts many known attacks against the installation process.