Remote Attestation of Runtime Behaviours via Checking Control-Flow and Data-Flow Integrity

点击翻译按钮获取中文摘要

Since most of the remote attestation techniques focus on the load-time integrity of applications by applying checksum functions on static memory regions of the prover (i.e. code segment), they are not able to catch runtime attacks that operate by using only dynamic memory regions such as heap or stack areas. In order to take the runtime attestation a step forward, we propose an attestation scheme that checks the compliance of dynamic properties collected (in a trusted way) with the static features extracted such as control-flow and data-flow information.This research comes under the EPSRC Cyber Security research theme