earticle

영어

Malware inside networks along with worms and viruses have become a critical concern. Even though several approaches have been proposed to eliminate this severe problem, the vulnerability of the software dissemination server’s platform is often underestimated. Trusted software dissemination based on trusted computing mutual remote attestation mechanisms is a new approach designed to overcome it. But the limited computational capabilities of the TPM device on the sever side is an obvious bottleneck to scalable performance. Without any changes being made to the traditional TPM, and simply by introducing a novel highly efficient remote attestation mechanism specifically tailored for the server platform, we greatly increase the scalability of the server platform. Experimental measurements shows that handling multiple, almost simultaneous, software download requests only increases the average response time by a constant increment, which shows great efficiency when compared to existing linear approaches. Shared key, dealt with by Bilinear-Pairing properties, is also included to protect the attestation session and disseminated software. Implementation details, security analysis and performance evaluation of our system architecture are presented to demonstrate that our approach is feasible for a practical and scalable trusted software dissemination system.