Carnegie Mellon reports on the TPM

Posted by Ken Y-N on January 27th, 2011 at 02:04pm

Just a quick note about a paper published by Carnegie Mellon entitled "Trust and Trusted Computing Platforms", technical note CMU/SEI-2011-TN-005. The abstract is as follows:

Hardware-based trusted computing platforms are intended to overcome many of the problems of trust that are prominent in computing systems. In this paper, a result of the Software Engineering Institute’s Independent Research and Development Project "Trusted Computing in Extreme Adversarial Environments: Using Trusted Hardware as a Foundation for Cyber Security," we discuss the capabilities and limitations of the Trusted Platform Module (TPM). We describe credential storage, device identity, chains of trust, and other techniques for extending hardware-based trust to higher levels of software-based infrastructure. We then examine the character of trust and identify strategies for increasing trust. We show why acceptance of TPM-based trust has been limited to date and suggest that broader acceptance will require more focus on traditional trust issues and on end-to-end services.

It is available for download for free from the university’s Software Engineering Institute.

Tags: carnegie-mellon

Under TPM Tags: carnegie-mellon