semantic remote attestation for security policy

	semantic remote attestation for security policy
	Qian Zhang; Yeping He; Ce Meng
	2010
会议名称	semantic remote attestation for security policy
页码	40551
会议日期	2010
会议地点	Seoul
ISBN	978-1-4244-5941-4
部门归属	Inst. of Software, Chinese Acad. of Sci., Beijing, China
摘要	In the software environment with security policy enforced, the behavior of application depends on not only its binary code, but also the enforcing security policy. Therefore, remote attestation for security policy is as important as that for binary code. However, since the specialties of security policy, which include more mutable and mixture of semantics, it is not suitable to use integrity measurement as the evidence to verify trustworthy of security policy. In this paper, we propose a novel semantic approach to remote attest security policy. This approach utilizes policy analysis technique to extract semantics from security policy, and utilizes logical programming to query required semantics from the mixture of semantics in security policy. We design and implement this approach on SELinux policy in this paper and discuss the security of this implementation on the basis of verified trust of TCB.
关键词	Selinux Policy Appraoch Binary Code Logical Programming Policy Analysis Technique Query Security Policy Semantic Remote Attestation Linux Logic Programming Query Processing Security Of Data
内容类型	会议论文
URI标识	http://ir.iscas.ac.cn/handle/311060/8898
专题	基础软件国家工程研究中心
推荐引用方式 GB/T 7714	Qian Zhang,Yeping He,Ce Meng. semantic remote attestation for security policy[C],2010:40551.

条目包含的文件
文件名称/大小	文献类型	版本类型	开放类型	使用许可
semantic remote atte（268KB）			开放获取	--	请求全文