Real-time remote attestation of IaaS cloud

Aiming at the deficiencies when deploying existing remote attestation approaches in the IaaS cloud, this paper proposes a real-time remote attestation approach for IaaS cloud. The approach includes a realtime remote attestation architecture and corresponding dynamic measurement mechanism and reference generation mechanism. The contributions can be concluded into three aspects. Firstly, it alleviates the TOCTOU (Time of Check, Time of Use) problem. Secondly the load of verification is low, as makes it acceptable for thin clients. Thirdly the runtime behavior of the software is measured dynamically. In our prototype it is shown that the approach can detect the attacks such as code injection.