Trusted Computing: Security and Applications

Abstract

The main objective of this paper is to highlight some of the major security and application issues confronting trusted computing technology. This technology-now present in a large proportion of new PCs and incorporating a wide range of cryptographic functionality-has the potential to have a major practical impact, but it has not been widely discussed. This paper is an attempt to encourage greater debate about this technology and its possible implications. Following a brief introduction to the history of trusted computing, we provide a summary of its main features. This leads naturally to a consideration of the issues that may impede its use, including potential problems with its cryptographic components. Possible applications of the technology are then discussed.

Cloud computing security perimeter

“…На следующем этапе, используя средства проверки и аттеста-ции (в прозрачном «сквозном» режиме [10,11]), клиент допуска-ется к взаимодействию с режимом выполнения виртуальной маши-ны (через блок управления облаком и порталами, предоставленным провайдером и состоящим из системы контроля конфигураций и анализа информации, средств выполнения правил, средств управле-ния рисками). Управление виртуальными службами осуществляется с помощью интерфейсов прикладного программирования (vCenter, OpenStack), что позволяет осуществлять необходимый контроль раз-вертывания задач.…”

Enhancing data privacy and integrity in the cloud

“…In general, it is difficult to address the issue of a malicious host when communicating with a remote system [5]. Especially, the inherent freedom and flexibility of the cloud contribute to this nature.…”

“…It is difficult to address the issue of a malicious host when communicating with a remote system [5]. A host identity certificate does not guarantee that its administrators are not interfering with the execution of code or monitoring its data.…”

“…Trusted computing incorporates these techniques and has a potential to provide mechanisms for the blind processing service [5]. We propose to deploy the trusted computing mechanisms for the blind processing service to accomplishing our goal of enhancing the privacy and integrity over the cloud.…”

“…We look to provide a solution that will encompass information sharing with privacy and integrity services where remote systems can access and process information without intervention from unintended third parties. In providing the blind processing service in the cloud, we utilize trusted computing mechanisms [5]. …”