Study of trustworthiness measurement and kernel modules accessing address space of any process

Authors:
Ce Zhang;Gang Cui;Bin Jin;Liang Wang
Affiliations:
School of Computer, Harbin Institute of Technology, Harbin, China, School of Computer, Harbin Institute of Technology at Weihai, Weihai, China;School of Computer, Harbin Institute of Technology, Harbin, China;School of Computer, Harbin Institute of Technology at Weihai, Weihai, China;School of Computer, Harbin Institute of Technology at Weihai, Weihai, China
Venue:
ICICA'12 Proceedings of the Third international conference on Information Computing and Applications
Year:
2012

Citing 4
Cited 0

Basic Concepts and Taxonomy of Dependable and Secure Computing

IEEE Transactions on Dependable and Secure Computing
PRIMA: policy-reduced integrity measurement architecture

Proceedings of the eleventh ACM symposium on Access control models and technologies
Design and implementation of a TCG-based integrity measurement architecture

SSYM'04 Proceedings of the 13th conference on USENIX Security Symposium - Volume 13
HIMA: A Hypervisor-Based Integrity Measurement Agent

ACSAC '09 Proceedings of the 2009 Annual Computer Security Applications Conference

Quantified Score

Hi-index	0.00

Visualization

Abstract

Trustworthiness measurement is the base and important supporting technology of Trusted Computing. The main objective of trustworthiness measurement is that, how to estimate the trustworthiness of different objects by appropriate policies. In measurement, accessing the address space of measured objects and obtaining the various datum and evidences are considered firstly. Aiming to this problem, this paper presents the primary measurement system architecture, and puts forward three methods of MA(Measurement Agent)in user space invoking MMK(Measurement Module in Kernel)in kernel space. In addition, the principal and realization of accessing a process address space is proposed, including address remapping, switching the CR3 manually and by kernel thread. Finally, three methods are compared qualitatively, and performance consumption is listed by experiment.