An Efficient and Flexible Dynamic Remote Attestation Method

Remote attestation is an important characteristic of trusted computing technology which provides reliable evidence that a trusted environment actually exists. In this paper, we present a new paradigm that leverages software attack graph for dynamic remote attestation. The major contributions of this paper are two-folds: (1) From the angle of attack, we propose a method to reduce the number of objects to be monitored. (2)We propose a flexible and complete execution status information collection method at operating system level. (3)Software attack graph is introduced as the basis for remote attestation. Analysis shows that our method is complete, efficient and flexible.