Scholarlink

<p>Ensuring the integrity of distributed and heterogeneous systems is a fundamental challenge in modern network security. While the Simple Network Management Protocol (SNMP) remains a widely adopted framework for network monitoring, it lacks native support for verifying the trustworthiness of system states. This paper proposes an enhanced SNMP architecture that integrates the Trusted Platform Module (TPM)—a hardware-based root of trust, to enable secure, scalable, and centralized integrity monitoring. By extending SNMP with custom Management Information Bases (MIBs), the proposed solution facilitates the retrieval of cryptographic hash values from TPM’s Platform Configuration Registers (PCRs) and securely transmits them over SNMPv3 with authenticated and encrypted communication. The framework utilizes both Net-SNMP and TPM 2.0 toolchains, which are tested in a simulated distributed environment. TPM integrity data is publicly disclosed via SNMP agents, and these values are checked against known-good values at a centralized SNMP manager via a secure database. As experimentally confirmed, the system can ensure 100% integrity validation. Its performance overhead is minimal, averaging 3.6% of the CPU usage, 4.2% of the network traffic, and has no significant impact on memory. The proposed architecture will enhance the security of network management systems by implementing trusted hardware within the current monitoring infrastructure. It has a low resource footprint and is reliable in detecting. Thus, it can be implemented both in enterprise and cloud-based systems.</p>

错误：搜索内容不能为空，请输入英文关键词
错误：关键词超出字数限制，请精简
高级检索

Trusted Simple Network Management Protocol for Integrity Evaluation in Distributed Environment

  • 期刊论文

  • 发表日期：

    2026年2月12日

查看全文
  • Hafiz Muhammad Ashja Khan,
  • Nadeem Sarwar,
  • Monia Hamdi,
  • Usman Inayat

摘要

Ensuring the integrity of distributed and heterogeneous systems is a fundamental challenge in modern network security. While the Simple Network Management Protocol (SNMP) remains a widely adopted framework for network monitoring, it lacks native support for verifying the trustworthiness of system states. This paper proposes an enhanced SNMP architecture that integrates the Trusted Platform Module (TPM)—a hardware-based root of trust, to enable secure, scalable, and centralized integrity monitoring. By extending SNMP with custom Management Information Bases (MIBs), the proposed solution facilitates the retrieval of cryptographic hash values from TPM’s Platform Configuration Registers (PCRs) and securely transmits them over SNMPv3 with authenticated and encrypted communication. The framework utilizes both Net-SNMP and TPM 2.0 toolchains, which are tested in a simulated distributed environment. TPM integrity data is publicly disclosed via SNMP agents, and these values are checked against known-good values at a centralized SNMP manager via a secure database. As experimentally confirmed, the system can ensure 100% integrity validation. Its performance overhead is minimal, averaging 3.6% of the CPU usage, 4.2% of the network traffic, and has no significant impact on memory. The proposed architecture will enhance the security of network management systems by implementing trusted hardware within the current monitoring infrastructure. It has a low resource footprint and is reliable in detecting. Thus, it can be implemented both in enterprise and cloud-based systems.