Enomaly ECP HAE for Trusted Cloud Computing

Posted by Ken Y-N on April 14th, 2010 at 04:13pm

The curiously-named ElasticVapor blog from Reuven Cohen talked about his company, Enomaly, launching their ECP (perhaps Enomaly Cloud Platform) HAE (High Assurance Edition). The article describes the platform helps establish a trusted cloud platform by doing the following:

The end customer uses Enomaly’s ECP HAE client, which uses our patented technology to verify the integrity of the cloud provider’s software stack. When the client is connected to an "approved" HAE-verified platform, Enomaly’s HAE client displays a prominent positive verification screen indicating that the platform is safe to use.

The ECP HAE itself is based around Intel’s TXT (Trusted Execution Technology) and a Trusted Platform Module, with a Xen hypervisor running on top. Their lead security architect, Dr David Lie, has patented practical remote attestation for Infrastructure as a Service (IaaS) providers on this ECP HAE. I have also looked at practical remote attestation, so I’ll have to chase down some references to see what they are doing!

Their work does seem interesting, and I’ll be keeping an eye on what they are doing in the future.

Tags: cloud computing, enomaly, remote attestation

Under Virtualisation Tags: cloud computing, enomaly, remote attestation