http://kernsec.org/wiki/index.php?action=history&feed=atom&title=Linux_Security_Summit_2012%2FAbstracts%2FSteffen 2026-04-16T20:47:00Z Revision history for this page on the wiki MediaWiki 1.36.1 http://kernsec.org/wiki/index.php?title=Linux_Security_Summit_2012/Abstracts/Steffen&diff=3305&oldid=prev 2012-06-27T04:12:10Z

<p><span dir="auto"><span class="autocomment">Abstract</span></span></p> <table style="background-color: #fff; color: #202122;" data-mw="interface"> <col class="diff-marker" /> <col class="diff-content" /> <col class="diff-marker" /> <col class="diff-content" /> <tr class="diff-title" lang="en"> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Older revision</td> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Revision as of 04:12, 27 June 2012</td> </tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l37">Line 37:</td> <td colspan="2" class="diff-lineno">Line 37:</td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>TPM-based Remote Attestation of the IMA BIOS measurements</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>TPM-based Remote Attestation of the IMA BIOS measurements</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">- </del>NEA client side:</div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">* </ins>NEA client side:</div></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">  </del>http://wiki.strongswan.org/projects/strongswan/wiki/PTS-IMC</div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>http://wiki.strongswan.org/projects/strongswan/wiki/PTS-IMC</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">- </del>NEA server side:</div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">* </ins>NEA server side:</div></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">  </del>http://wiki.strongswan.org/projects/strongswan/wiki/PTS-IMV</div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>http://wiki.strongswan.org/projects/strongswan/wiki/PTS-IMV</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>strongSwan’s TNC-based Network Endpoint Assessment capabilities</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>strongSwan’s TNC-based Network Endpoint Assessment capabilities</div></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div> </div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>http://www.strongswan.org/tnc/</div></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">  </del>http://www.strongswan.org/tnc/</div></td><td colspan="2"></td></tr> </table>

JamesMorris http://kernsec.org/wiki/index.php?title=Linux_Security_Summit_2012/Abstracts/Steffen&diff=3304&oldid=prev 2012-06-27T04:04:45Z

<p>New page: == Title == The Linux Integrity Subsystem and TPM-based Network Endpoint Assessment == Presenter == Andreas Steffen, HSR University of Applied Sciences Rapperswil, Switzerland == Abstr...</p> <p><b>New page</b></p><div>== Title ==<br /> <br /> The Linux Integrity Subsystem and TPM-based Network Endpoint Assessment<br /> <br /> == Presenter ==<br /> <br /> Andreas Steffen, HSR University of Applied Sciences Rapperswil, Switzerland<br /> <br /> == Abstract ==<br /> <br /> The Integrity Measurement Architecture (IMA) introduced with the<br /> Linux 2.6.30 kernel extends its BIOS measurements taken during the<br /> pre-boot phase into the Platform Configuration Registers (PCRs) of<br /> a Trusted Platform Module (TPM). The IETF Network Endpoint Assessment<br /> (NEA) reference model (RFC 5209) defines Posture Attribute (PA),<br /> Posture Broker (PB) and Posture Transport (PT) protocols which allow<br /> the exchange of security measurement data between a NEA client and a<br /> NEA server.<br /> <br /> The open source Linux strongSwan VPN software implements the PA-TNC<br /> (RFC 5792), PB-TNC (RFC 5793) and PT-EAP (draft-ietf-nea-pt-eap)<br /> protocols over a secure IKEv2 EAP TTLS communication channel and can<br /> act either as a NEA client collecting IMA measurement data signed<br /> by the TPM or as a NEA server validating the received measurements<br /> against reference values stored in a database. Based on the assessment<br /> result the NEA server either grants or denies network access to the<br /> NEA client.<br /> <br /> This talk will give a short overview on the IETF NEA framework and<br /> will then present the implemented TPM-based IMA BIOS measurements<br /> use case. Finally an outlook will be given on how remote attestation<br /> could be extended to EVM file measurements.<br /> <br /> <br /> Links:<br /> <br /> TPM-based Remote Attestation of the IMA BIOS measurements<br /> <br /> - NEA client side:<br /> http://wiki.strongswan.org/projects/strongswan/wiki/PTS-IMC<br /> <br /> - NEA server side:<br /> http://wiki.strongswan.org/projects/strongswan/wiki/PTS-IMV<br /> <br /> strongSwan’s TNC-based Network Endpoint Assessment capabilities<br /> <br /> http://www.strongswan.org/tnc/</div>

JamesMorris