Visual Monitoring System of Multi-Hosts Behavior for Trustworthiness with Mobile Cloud
1
조회
0
다운로드
1
인용
0
참고문헌
키워드
초록
Recently, security researches have been processed on the method to cover a broader range of hacking attacks at the low level in the perspective of hardware. This system security applies not only to individuals’ computer systems but also to cloud environments. “Cloud” concerns operations on the web. Therefore it is exposed to a lot of risks and the security of its spaces where data is stored is vulnerable. Accordingly, in order to reduce threat factors to security, the TCG proposed a highly reliable platform based on a semiconductor-chip, the TPM. However, there have been no technologies up to date that enables a real-time visual monitoring of the security status of a PC that is operated based on the TPM. And the TPB has provided the function in a visual method to monitor system status and resources only for the system behavior of a single host. Therefore, this paper will propose a m-TMS (Mobile Trusted Monitoring System) that monitors the trusted state of a computing environment in which a TPM chip-based TPB is mounted and the current status of its system resources in a mobile device environment resulting from the development of network service technology. The m-TMS is provided to users so that system resources of CPU, RAM, and process, which are the monitoring objects in a computer system, may be monitored. Moreover, converting and detouring single entities like a PC or target addresses, which are attack pattern methods that pose a threat to the computer system security, are combined. The branch instruction trace function is monitored using a BiT Profiling tool through which processes attacked or those suspected of being attacked may be traced, thereby enabling users to actively respond
Abstract
Recently, security researches have been processed on the method to cover a broader range of hacking attacks at the low level in the perspective of hardware. This system security applies not only to individuals’ computer systems but also to cloud environments. “Cloud” concerns operations on the web. Therefore it is exposed to a lot of risks and the security of its spaces where data is stored is vulnerable. Accordingly, in order to reduce threat factors to security, the TCG proposed a highly reliable platform based on a semiconductor-chip, the TPM. However, there have been no technologies up to date that enables a real-time visual monitoring of the security status of a PC that is operated based on the TPM. And the TPB has provided the function in a visual method to monitor system status and resources only for the system behavior of a single host. Therefore, this paper will propose a m-TMS (Mobile Trusted Monitoring System) that monitors the trusted state of a computing environment in which a TPM chip-based TPB is mounted and the current status of its system resources in a mobile device environment resulting from the development of network service technology. The m-TMS is provided to users so that system resources of CPU, RAM, and process, which are the monitoring objects in a computer system, may be monitored. Moreover, converting and detouring single entities like a PC or target addresses, which are attack pattern methods that pose a threat to the computer system security, are combined. The branch instruction trace function is monitored using a BiT Profiling tool through which processes attacked or those suspected of being attacked may be traced, thereby enabling users to actively respond
참고문헌 (19)
- "Trusted Computing Group"[URL]
- "TCG Specification Architecture Overview Specification Revision 1.4", Trusted Computing Group(TCG), ~ (2007)
- Common Criteria, "Trusted Computing Group Personal Computer Specific Trusted Building Block Protection Profile and TCG PC Specific TBB With Maintenance Protection Profile", ~ (2004)
- H. Lin, "Micro-Architecture Support for Integrity Measurement on Dynamic Instruction Trace", Journal of Information Security, 1(1), pp.1~10 (2010)
- "Integrity Measurement Architecture"[URL]
- Y. S. Jeong, "Visual Trustworthy Monitoring System(v-TMS)for Behavior of Trusted Computing", Journal of Internet Technology, 11(6), pp.731~741 (2010)
- "The NIST Definition of Cloud Computing"[URL]
- V. William, "Introduction to Cloud Computing, In Cloud Computing: Principles and Paradigms", pp.1~44 (2011), Wiley Press
- Design and Implementation of the AEGIS Single- Chip Secure Processor Using Physical Random Functions. Technical Report, "G. Suh", ~, pp.MIT CSAIL CSG Technical Memo 483 (2004)
- T. Alves, "Trustzone: Integrated Hardware and Software Security" (2004), ARM
- ARM Dons Armor: TrustZone Security Extensions Strengthen ARMv6 Architecture, "T. Halfhill", Microprocessor, ~ (2003)
- J. Crandall, "Minos: Control Data Attack Prevention Orthogonal To Memory Model", Proc. the 37th Int’l Symp. (2004), On Microarchitecture
- Renato J. Figueiredo, "Guest Editors’ Introduction: Resource Virtualization Renaissance", IEEE Computer, 38(5), pp.28~31 (2005)
- Common Criteria, "Trusted Computing Group (TCG) Personal Computer (PC) Specific Trusted Building Block (TBB) Protection Profile and TCG PC Specific TBB With Maintenance Protection Profile", July, ~ (2004)
- Paul Barham, "Rolf Neugebauer, Ian Pratt and Andrew Warfield, Xen and the Art of Virtualization", Proceedings of the ACM Symposium on Operating Systems Principles, Bolton Landing, NY, October (2003)
- Tal Garfinkel, "Terra: A Virtual Machine- Based Platform for Trusted Computing", Proceedings of the Symposium on Operating Systems Principles (SOSP), Bolton Landing, NY, pp.193~206 (2003)
- Robert P. Goldberg, "Survey of Virtual Machine Research", IEEE Computer Magazine, 7(6), pp.34~45 (1974)
- "Trusted Virtual Data Center"[URL]
- Reiner Sailer, "John Linwood Griffin and Leendert van Doorn, Building a MAC-Based Security Architecture for the Xen Opensource Hypervisor", Proceedings of the 21st Annual Computer Security Applications Conference (ACSAC), Tucson, AZ, December (2005)