Research on theory and key technology of trusted computing platform security testing and evaluation

查看全文 作　　者：ZHANG HuanGuo1,2, YAN Fei1,2, FU JianMing1,2, XU MingDi1,2, YANG Yang1,2, HE Fan1,2 & ZHAN Jing1,2 1School of Computer, Wuhan University, Wuhan 430072, China;2Key Laboratory of Aerospace Information Security and Trusted Computing, Ministry of Education, Wuhan 430072, China

出　　处：《Science China(Information Sciences)》索引2010年第53卷第3期,共20页

基　　金：supported by the National Natural Science Foundation of China (Grant Nos. 60673071, 60970115 and 90718005);the National High-Tech Research & Development Program of China (Grant Nos. 2007AA01Z411,2006AA01Z442);the Open Foundation of Key Laboratory of Aerospace Information Security and Trusted Computing, Ministry of Education (Grant Nos. AISTC2008 01, AISTC2008Q02). 摘　　要：Trusted computing has become a new trend in the area of international information security, and the products of trusted computing platform begin to be used in application. Users will not use the products of information security, unless it goes through the testing and evaluation. Here we concentrate on the testing and evaluation problem of trusted computing platform, begin with constructing proper formalization model of trusted computing platform for testing, and establish a mathematical chain of trust model based on SPA. Moreover, we give a verification method of composite characteristics and find the potential factors threatening the trusted system in the process of remote attestation through analysis. For trusted software stack, we study the problem of automatic generation of test case and propose an improved method of generating the random test case, to raise the quality of test case. Finally, we give a prototype system of trusted computing platform and the actual test data related. The result demonstrates that there exist some flaws in the architecture of the present TCG computing platform. At the same time, some flaws are found in the products of existing trusted computing platform, thus a basis is laid for the improvement and development of trusted platform technology and its products. 关键词：可信计算平台安全测试平台技术评估信息安全产品形式化模型应用程序数学模型

相关文献

参考文献（38）
引证文献（11）
耦合文献（111）

参考文献(38)

引证文献(11)

耦合文献(111)

互联网出版许可证新出网证(渝)字10号全国400电话 - 免长途话费

Research on theory and key technology of trusted computing platform security testing and evaluation

参考文献(38)

引证文献(11)

耦合文献(111)

用户提示