Trust and Trusted Computing Platforms

reportActive / Technical Report | Accession Number: ADA536188 | Open PDF

Abstract:

Hardware-based trusted computing platforms are intended to overcome many of the problems of trust that are prominent in computing systems. In this paper, a result of the Software Engineering Institutes Independent Research and Development Project Trusted Computing in Extreme Adversarial Environments Using Trusted Hardware as a Foundation for Cyber Security, we discuss the capabilities and limitations of the Trusted Platform Module TPM. We describe credential storage, device identity, chains of trust, and other techniques for extending hardware-based trust to higher levels of software-based infrastructure. We then examine the character of trust and identify strategies for increasing trust. We show why acceptance of TPM-based trust has been limited to date and suggest that broader acceptance will require more focus on traditional trust issues and on end-to-end services.

Author(s):
Fisher, David A. ; Mccune, Jonathan M. ; Andrews, Archie D.
Author Organization(s):
CARNEGIE-MELLON UNIV PITTSBURGH PA SOFTWARE ENGINEERING INST
Descriptive Note:
Final rept.
Supplementary Note:
This work was created in the performance of Federal Government Contract Number FA8721-05-C-0003 with Carnegie Mellon University for the operation of the Software Engineering Institute, a federally funded research and development center. The Government of the United States has a royalty-free government-purpose license to use, duplicate, or disclose the work, in whole or in part and in any manner, and to have or permit others to do so, for government purposes pursuant to the copyright license under the clause at 252.227-7013. The original document contains color images. DOI: 10.21236/ADA536188
Pagination:
0026

Security Markings

DOCUMENT & CONTEXTUAL SUMMARY

Distribution:
Approved For Public Release
Distribution Statement:
Approved For Public Release; Distribution Is Unlimited.

RECORD

Collection: TR
Identifying Numbers
Report Number(s):
CMU/SEI-2011-TN-005
Contract/Grant Number(s):
FA8721-05-C-0003
Monitor Series:
ESC/MA
 Subject Terms
Joint Capability Areas:
JCA_6_Net Centric; JCA_6.4.1_Secure Information Exchange; JCA_6.4_Information Assurance; JCA_4.6_Engineering; JCA_5_Command and Control; JCA_4.6.1_General Engineering; JCA_6.1.3_Switching and Routing; JCA_6.1_Information Transport; JCA_5.3_Planning; JCA_5.3.3_Develop Strategy; JCA_5.2_Understand; JCA_5.2.3_Share Knowledge and Situational Awareness; JCA_1_Force Support; JCA_1.2_Force Preparation; JCA_6.2.1_Information Sharing; JCA_6.2.2_Computing Services; JCA_1.2.3_Educating; JCA_3.2_Engagement; JCA_3_Force Application; JCA_6.2.3_Core Enterprise Services; JCA_3.2.2_Non-Kinetic Means
Modernization Areas:
Cyber
Communities of Interest:
No COI(s) Identified
Descriptor(s):
*DATA PROCESSING SECURITY, COMPUTERS, COMPUTER PROGRAMS
Field(s)/Group(s):
Computer Hardware, Computer Systems Management and Standards
Keyword(s):
CHAINS OF TRUST, CYBERSECURITY, *HARDWARE BASED TRUST, SECURE COMPUTING, *TRUSTED COMPUTING, TRUSTED PLATFORM MODULE
Report Date:
2010 Jan 01
Creation Date:
2011 Feb 16