A Security-Enhanced Remote Platform Integrity Attestation Scheme
Cheng Song, Liu Bing, Yang Xin, Yang Yixian, Zhongxian Li, Yin Han · 2009
Remote platform integrity attestation is a method by which a client attests its hardware and software configuration to a remote server. The goal of remote integrity platform attestation is to enable a remote challenger to determine the level of trust in the integrity of another attestator's platform configuration. However, the existing integrity reporting protocol is vulnerable to man-in-the-middle(MITM) attacks. In this paper, we describe this kind of attacks against protocols for remote platform integrity attestation, and propose a security-enhanced remote platform integrity attestation scheme for preventing man-in-the middle attacks.