一种更新完整性增强的操作系统的实用方法
A practical approach for updating an integrity-enforced operating system
摘要：
可信计算定义了如何安全地测量、存储和验证控制计算机的软件的完整性。使它们难以在实践中应用的主要挑战之一是软件更新问题。具体地，操作系统更新导致完整性违反，因为它改变了远程验证器（例如完整性监视系统）所信任的公知初始状态。因此，远程计算机的完整性监控由于大量的误报而变得不可靠。我们通过在操作系统和软件存储库之间添加额外的间接层来解决这个问题。我们提出了一个可信的软件存储库（TSR），一个安全的代理，克服了以前的方法的缺点，通过消毒软件包。清理包括修改不安全的安装脚本和添加数字签名，以使软件包可以安装在操作系统中，而不会破坏其完整性。TSR利用屏蔽执行，即，英特尔SGX，实现净化过程的机密性和完整性保证。TSR对包管理器是透明的，并且不需要在软件包构建和分发过程中进行任何更改。我们的评估表明，在SGX内部运行TSR是可行的，因为与没有SGX的本机执行相比，它在包清理期间仅引起约1.18倍的性能开销。TSR支持Alpine Linux的主要和社区存储库中99.76%的可用软件包，同时将总存储库大小增加了3.6%。
英文摘要：
Trusted computing defines how to securely measure, store, and verify the integrity of software controlling a computer. One of the major challenges that make them hard to be applied in practice is the issue with software updates. Specifically, an operating system update causes the integrity violation because it changes the well-known initial state trusted by remote verifiers, such as integrity monitoring systems. Consequently, the integrity monitoring of remote computers becomes unreliable due to the high amount of false positives. We address this problem by adding an extra level of indirection between the operating system and software repositories. We propose a trusted software repository (TSR), a secure proxy that overcomes the shortcomings of previous approaches by sanitizing software packages. Sanitization consists of modifying unsafe installation scripts and adding digital signatures in a way software packages can be installed in the operating system without violating its integrity. TSR leverages shielded execution, i.e., Intel SGX, to achieve confidentiality and integrity guarantees of the sanitization process. TSR is transparent to package managers, and requires no changes in the software packages building and distributing processes. Our evaluation shows that running TSR inside SGX is practical; since it induces only ~1.18X performance overhead during package sanitization compared to the native execution without SGX. TSR supports 99.76% of packages available in the main and community repositories of Alpine Linux while increasing the total repository size by 3.6%.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
