Hardware-based trusted computing platforms are intended to overcome many of the problems of trust that are prominent in computing systems. In this paper, a result of the Software Engineering Institute's Independent Research and Development Project "Trusted Computing in Extreme Adversarial Environments: Using Trusted Hardware as a Foundation for Cyber Security," we discuss the capabilities and limitations of the Trusted Platform Module (TPM). We describe credential storage, device identity, chains of trust, and other techniques for extending hardware-based trust to higher levels of software-based infrastructure. We then examine the character of trust and identify strategies for increasing trust. We show why acceptance of TPM-based trust has been limited to date and suggest that broader acceptance will require more focus on traditional trust issues and on end-to-end services.
Technical Note
CMU/SEI-2011-TN-005
January 2011
SEI:
Fisher, David; McCune, Jonathan; & Andrews, Archie. Trust and Trusted Computing Platforms (CMU/SEI-2011-TN-005). Software Engineering Institute, Carnegie Mellon University, 2011. http://www.sei.cmu.edu/library/abstracts/reports/11tn005.cfm
IEEE:
D. Fisher, J. McCune, and A. Andrews, "Trust and Trusted Computing Platforms," Software Engineering Institute, Carnegie Mellon University, Pittsburgh, Pennsylvania, Technical Note CMU/SEI-2011-TN-005, 2011. http://www.sei.cmu.edu/library/abstracts/reports/11tn005.cfm
APA:
Fisher, D., McCune, J., & Andrews, A. (2011). Trust and Trusted Computing Platforms (CMU/SEI-2011-TN-005). Retrieved June 20, 2013, from the Software Engineering Institute, Carnegie Mellon University website: http://www.sei.cmu.edu/library/abstracts/reports/11tn005.cfm
CHI:
Fisher, David, Jonathan McCune, and Archie Andrews. Trust and Trusted Computing Platforms (CMU/SEI-2011-TN-005). Pittsburgh, PA: Software Engineering Institute, Carnegie Mellon University, 2011. http://www.sei.cmu.edu/library/abstracts/reports/11tn005.cfm
MLA:
Fisher, D., McCune, J., & Andrews, A. 2011. Trust and Trusted Computing Platforms (Technical Report CMU/SEI-2011-TN-005). Pittsburgh: Software Engineering Institute, Carnegie Mellon University. http://www.sei.cmu.edu/library/abstracts/reports/11tn005.cfm
For more information