A method to respond to TOCTOU attacks against TPM trusted computing in the environment of multiple virtual domains

Abstract

The present invention relates to a method to respond to TOCTOU attacks against TPM trusted computing in the environment of multiple virtual domains. The components of the method include the core filesrealized in a privileged domain and having enhanced function, virtual domain management tool with enhanced function, vTPM equipment procedure and privileged domain proxy module with enhanced function, and the memory monitor module realized in virtual machine monitor. An extra hypercall (T_hypercall) is defined between privileged domain and virtual machine monitor and is used to transfer information from privileged domain to virtual machine monitor. Ten virtual interrupts (T_vIRQ) are defined and used to transfer the information about a credible virtual domain from the virtual machine monitorto the privileged domain. Each virtual interrupt corresponds to an operating credible virtual domain. Through binding virtual TPM equipment ID No. and virtual interrupts, the method of the present invention solves the problem that the existing method to respond to TOCTOU attacks against trusted computing is unworkable in the environment of multiple virtual domains.

Description

technical field [0001] The invention relates to the field of computer information security trusted computing, in particular to a TOCTOU attack response method for TPM trusted computing in a multi-virtual domain environment. The response method of the present invention defends against TOCTOU attacks on TPM trusted computing by updating the platform information stored by the trusted platform module. Background technique [0002] At present, most commercial operating systems design the kernel program (including loading modules) to have superuser privileges, and the kernel program uses shared linear memory in order to improve system efficiency, which leads to the fact that the TCG architecture that only provides software loading verification is vulnerable to TOCTOU ( time of check vs time of use). Using the Xen virtual machine can implement a software-only solution to monitor TOCTOU attacks against TPM trusted computing in customer virtual domains. At present, there is also a ...

AI Technical Summary

Problems solved by technology

[0003] However, the above two response methods are only applicable to a single trusted virtual domain environment, and in most actual cases, multiple customer virtual domains are likely to run in the Xen virtual environment at the same time. It is necessary for us to implement a multi-domain environment for TOCTOU Attack Response Methods

Images