TC: Small: Layered Modeling for Design, Analysis, and Implementation of Trusted Platform Applications

随着可信计算技术，特别是可信平台模块(TPM)的普及，为建立在这一新技术上的应用程序奠定坚实的基础是很重要的。该项目采用分层方法，支持严格的分析和安全证明，并为直接映射到分析模型的模块化软件设计提供基础，旨在为Trusted Platform应用程序开发模型提供结构化工作。项目活动是按照五个具体目标组织的：为严格的安全分析开发具体的数学模型；分析建立在TPM基础上的特定的广泛适用的功能；开发定时准确、可扩展的TPM模拟器；研究TPM在应用程序中的使用；以及开发与正式模型相对应的分层安全框架。该项目的方法遵循两个原则：保持其结构和简单(机制的经济原则)和通过严格的分析和证明来证明构造的合理性。尽管可信计算技术在现代系统中的使用越来越多，但关于这一新技术的正式研究很少。该项目将填补这一空白，并为今后在使用可信计算技术和设计现有技术的扩展方面的工作奠定基础。除了描述所获得的知识的出版物外，用于可扩展的TPM模拟器和分层可信计算框架的软件将免费分发。该项目还将创建一个网站，作为可信计算和相关研究信息的门户，并将包括开发一门关于可信计算和可信平台的课程，为本科生和研究生在这一新兴领域的工作做好准备。

As trusted computing technology, and trusted platform modules (TPMs) in particular, become widespread, it is important to build a strong foundation for applications built on this new technology. This project is a structured effort to develop a model for trusted platform applications, using a layered approach that supports rigorous analysis and security proofs, and provides a basis for modular software design that directly maps to the analytic model. Project activities are organized toward five specific objectives: development of concrete mathematical models for rigorous security analysis; analysis of specific widely-applicable functionality built on TPMs; development of a timing-accurate, extensible TPM simulator; study of TPM use in applications; and development of a layered security framework corresponding to the formal model. The project's approach is guided by two philosophies: keep it structured and simple (the principle of economy of mechanism) and justify constructions through rigorous analysis and proof.Despite the growing use of trusted computing technology in modern systems, there has been very little formal research regarding this new technology. This project will fill this gap and provide a basis for future work in both using trusted computing technology and in designing extensions to the current technology. In addition to publications describing the knowledge gained, software for the extensible TPM simulator and the layered trusted computing framework will be distributed freely. The project will also result in the creation of a website that will be a portal for information on trusted computing and related research, and will include the development of a course on trusted computing and trusted platforms that will prepare both undergraduates and graduate students for work in this emerging area.