Run-time-based remote attestation in a multi-tenant cloud

Posted by Ken Y-N on November 5th, 2010 at 04:22pm

If the title of this article makes no sense to you, feel free to skip over this recent blog post and PowerPoint presentation from Wenbo Mao at EMC on said run-time cloud attestation.

It’s an interesting idea, although I’m not sure why exactly the Measurer sits above the OS rather than below. Furthermore, Slide #6 highlights "a serious weakness of TCG" regarding the lack of run-time integrity checking – it may be true of the TPM and related PC client specifications, but the MTM (Mobile Trusted Module) has run-time integrity checking to address these very issues.

Tags: cloud computing, emc

Under TMI Tags: cloud computing, emc