On the Feasibility of Remote Attestation for Web Services
John Lyle, Andrew Martin · 2009
Remote attestation is a significant part of the functionality offered by trusted computing, allowing a platform to demonstrate that it is running trustworthy software. However, this technique has been criticised as impractical, citing the management overhead of maintaining lists of acceptable software configurations. In this paper we put numbers to this problem, and argue that remote attestation may not be too fragile a technology to be used for Web services.