Append Attestation मुफ़्त में

Hey welcome back from the break and for now we will start the tutorial this will be presented by Monty Wiseman and of Annie Dave and this is complete platform attestation remotely verifying the authenticity and integrity of your platforms Hardware firmware and software which is actually not the longest topic subject we've had at this conference I think there was a longer one once yeah there was a previous one you put was the nation state security okay okay well good crowd is shrinking so yeah as you said my name is Martha Washburn have been involved and I'm from GG research formerly you know he is from Intel but moved over to GE to do industrial controllers and critical infrastructure so with that with that in mind one of the things that we think is really important is us to use TBMs for at the station and more than just sealing data so we been looking at this project and I turn over to Avani who's was our intern over the summer working on some of the research on the current state of attestation so we're just going to kind of do a survey of what at the station tools are available today it's not a complete list but is a parcel list as well as some of the work that we're doing in TCG to try to standardize or in an effort to standardize some of the data structures so we can continue to make forward progress on this at the station program Thank You Monty so a test station overview as the title says that we are trying to achieve or say demonstrate proof of concept work for hardware software and firmware our test station as an verifier in one single platform so just going for some overview of attestation TPM supplier signing certificate will be issued by TPM author it like the vendor of it it will create an EK certificate on the on the TPM hardware itself now platform on which the TPM module will go with it will have its own platform supplied signing certificate which will be a tested or say which will be bind to the EK certificate which TPM is put on the platform on which TPM is kept on so the binding between the platform certificate and ek certificate is must for having the platform authenticity or for the attestation that's for the part 1 of hardware attestation then software so then comes the form there ok so for the firmware part so after that platform we say that that are tested then for the firmware part what we need is like the firmware BIOS boot process will take place and then it will generate certain logs those are called the events log in TPM 2.0 Event log structure which is a CL canonical event log structure we need a verifier which will verify first Hardware root of trust then firmware based root of trust then comes the I'm apart so integrity measurement i'ma so imma event logs will be generated at so so after the boot process finishes finishes it will take the measurement of different modules and it will create the IMO measurement that will go into the i'ma event log so that is called software event log structures so if we say our...