%0 Journal Article
%T Runtime Software Trustworthiness Evidence Collection Mechanism Based on TPM<br>基于TPM的运行时软件可信证据收集机制
%A GU Liang
%A GUO Yao
%A WANG Hua
%A ZOU Yan-Zhen
%A XIE Bing
%A SHAO Wei-Zhong
%A <br>古亮
%A 郭耀
%A 王华
%A 邹艳珍
%A 谢冰
%A 邵维忠
%J 软件学报
%D 2010
%I 
%X This paper extends the software trustworthiness evidence framework to include the runtime software trustworthiness evidence. To collect software trustworthiness evidence in an objective, genuine and comprehensive way, it proposes a runtime software trustworthiness evidence collection mechanism based on trusted computing technology. Based on the features provided by TPM (trusted platform module), as well as the late launch technology, a trusted evidence collection agent is introduced in an operating system kernel. The agent can securely monitor executing programs and collect their trustworthiness evidence accordingly. The agent also provides some trusted services for programs to collect application specific evidences and guarantees the trustworthiness of these evidences. This mechanism has good scalability to support various applications and software trustworthiness evaluation models. This paper also implements a prototype for the agent based on Linux security model in Linux. Based on the prototype, it studies the trustworthiness evaluation for executing a client program in a distributed computing environment. In this application, the performance of prototype is studied, and the feasibility of this approach is demonstrated.
%K high confidence software
%K software trustworthiness evaluation
%K software trustworthiness evidence
%K evidence collection
%K trusted computing
%K TPM (trusted platform module)<br>高可信软件
%K 软件可信性评估
%K 软件可信证据
%K 软件可信证据收集
%K 可信计算
%K TPM(trusted
%K platform
%K module)
%U http://www.alljournals.cn/get_abstract_url.aspx?pcid=5B3AB970F71A803DEACDC0559115BFCF0A068CD97DD29835&cid=8240383F08CE46C8B05036380D75B607&jid=7735F413D429542E610B3D6AC0D5EC59&aid=CFA19B9FA60F250B920F5D5D1B66EBAC&yid=140ECF96957D60B2&vid=659D3B06EBF534A7&iid=0B39A22176CE99FB&sid=F4BDB5452F9F5642&eid=117BC32987199759&journal_id=1000-9825&journal_name=软件学报&referenced_num=1&reference_num=45