Effective layered attestation systems require a trusted mechanism for their implementation, configuration, and deployment. Core to these systems are a distributed collection of Attestation Manager (AM) components that orchestrate primitive services and bundle evidence. Despite the trust placed in AMs, their configuration and deployment remain tedious and error prone, even for relatively simple attestation topologies. Beginning with a semantically sound layered attestation protocol language, we develop a verified toolchain for configuring attestation components and decidable algorithms for evaluating protocol executability and constrained evidence disclosure. The toolchain operates on configuration artifacts for AMs called Manifests that denote local attestation resources and facilitate coordination amongst remote AMs.  The Manifest Generator and Manifest Compiler tools jointly synthesize collections of Manifests from attestation protocol terms and specialize Manifests resulting in executable AMs. The resulting workflow automatically generates infrastructure for attestation protocol execution.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Verified Configuration and Deployment of Layered Attestation Managers

  • Adam Petz,
  • Will Thomas,
  • Anna Fritz,
  • T. J. Barclay,
  • Logan Schmalz,
  • Perry Alexander

摘要

Effective layered attestation systems require a trusted mechanism for their implementation, configuration, and deployment. Core to these systems are a distributed collection of Attestation Manager (AM) components that orchestrate primitive services and bundle evidence. Despite the trust placed in AMs, their configuration and deployment remain tedious and error prone, even for relatively simple attestation topologies. Beginning with a semantically sound layered attestation protocol language, we develop a verified toolchain for configuring attestation components and decidable algorithms for evaluating protocol executability and constrained evidence disclosure. The toolchain operates on configuration artifacts for AMs called Manifests that denote local attestation resources and facilitate coordination amongst remote AMs.  The Manifest Generator and Manifest Compiler tools jointly synthesize collections of Manifests from attestation protocol terms and specialize Manifests resulting in executable AMs. The resulting workflow automatically generates infrastructure for attestation protocol execution.