A method to respond to TOCTOU attacks against TPM trusted computing in the environment of multiple virtual domains

Abstract

The present invention relates to a method to respond to TOCTOU attacks against TPM trusted computing in the environment of multiple virtual domains. The components of the method include the core files realized in a privileged domain and having enhanced function, virtual domain management tool with enhanced function, vTPM equipment procedure and privileged domain proxy module with enhanced function, and the memory monitor module realized in virtual machine monitor. An extra hypercall (T_hypercall) is defined between privileged domain and virtual machine monitor and is used to transfer information from privileged domain to virtual machine monitor. Ten virtual interrupts (T_vIRQ) are defined and used to transfer the information about a credible virtual domain from the virtual machine monitor to the privileged domain. Each virtual interrupt corresponds to an operating credible virtual domain. Through binding virtual TPM equipment ID No. and virtual interrupts, the method of the present invention solves the problem that the existing method to respond to TOCTOU attacks against trusted computing is unworkable in the environment of multiple virtual domains.

Description

technical field [0001] The invention relates to the field of computer information security trusted computing, in particular to a TOCTOU attack response method for TPM trusted computing in a multi-virtual domain environment. The response method of the present invention defends against TOCTOU attacks against TPM trusted computing by updating the platform information stored in the trusted platform module. Background technique [0002] At present, most commercial operating systems design kernel programs (including load modules) to have superuser privileges, and kernel programs use shared linear memory in order to improve system efficiency, which makes the TCG architecture that only provides software load verification vulnerable to TOCTOU ( time of check vs time of use). Using the Xen virtual machine, a software-only solution can be implemented to detect TOCTOU attacks against TPM trusted computing in the customer virtual domain. There are also TOCTOU attack response methods fo...

AI Technical Summary

Problems solved by technology

[0003] However, the above two response methods are only applicable to a single trusted virtual domain environment, and in most actual cases, multiple customer virtual domains are likely to run in the Xen virtual environment at the same time. It is necessary for us to implement a multi-domain environment for TOCTOU Attack Response Methods

Images