You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
142 lines
3.9 KiB
142 lines
3.9 KiB
\documentclass[naustrian,notes]{beamer}
|
|
|
|
\input{header}
|
|
%Titelinformationen
|
|
\title[Digidow Biometric Sensor]{Digital Shadow: Biometric Sensor}
|
|
\subtitle{Master's Thesis Seminar}
|
|
\author[Michael Preisach]{Michael Preisach}
|
|
\date{January 15, 2019}
|
|
\institute[INS]{\includegraphics[width=0.1\textwidth]{../../resources/ins}}
|
|
|
|
\begin{document}
|
|
\begin{frame}
|
|
\titlepage
|
|
\end{frame}
|
|
|
|
\begin{frame}
|
|
\frametitle{Project Overview Digital Shadow}
|
|
\begin{figure}
|
|
\centering
|
|
\includegraphics[width=0.9\textwidth]{../../resources/globalview}
|
|
\end{figure}
|
|
\end{frame}
|
|
|
|
\begin{frame}
|
|
\frametitle{Physical Overview}
|
|
\begin{figure}
|
|
\centering
|
|
\includegraphics[height=0.8\textheight]{../../resources/networkview2.pdf}
|
|
\end{figure}
|
|
|
|
\end{frame}
|
|
|
|
\begin{frame}
|
|
\frametitle{TPM2: Platform Configuration Registers (PCR)\footnote{Arthur, Challener: \emph{A Practical Guide to TPM 2.0}}}
|
|
\begin{columns}
|
|
\begin{column}{0.5\textwidth}
|
|
\begin{itemize}
|
|
\item 24 Registers (for the PC)
|
|
\item represents state of measured unit
|
|
\item reset only by power cycle
|
|
\item SHA1 or SHA256
|
|
\item modify by \emph{Extend()}: \\
|
|
{\scriptsize\texttt{newPCR = Digest(oldPCR || data)}}
|
|
\item extension chain possible
|
|
\end{itemize}
|
|
\end{column}
|
|
\begin{column}{0.5\textwidth} %%<--- here
|
|
\begin{scriptsize}
|
|
\begin{tabular}{c|p{3.5cm}}
|
|
PCR &Allocation\\\hline
|
|
0 &BIOS \\
|
|
1 &BIOS Config \\
|
|
2 &Option ROM \\
|
|
3 &Option ROM Config \\
|
|
4 &MBR \\
|
|
5 &MBR Config \\
|
|
6 &State transition and wake events\\
|
|
7 &Platform specific measurements\\
|
|
8-15 &Static OS\\
|
|
16 &Debug\\
|
|
17-22 &General Purpose\\
|
|
23 &Application Support\\
|
|
\end{tabular}
|
|
\end{scriptsize}
|
|
\end{column}
|
|
\end{columns}
|
|
\end{frame}
|
|
|
|
\begin{frame}
|
|
\frametitle{TPM2: Platform Configuration Registers (PCR)\footnote{\url{https://github.com/Rohde-Schwarz-Cybersecurity/TrustedGRUB2}}}
|
|
\begin{center}
|
|
\begin{tabular}{l|l}
|
|
Component &measured by\\\hline
|
|
BIOS &CRTM \\
|
|
TrustedGRUB MBR bootcode &BIOS \\
|
|
TrustedGRUB kernel (\texttt{diskboot.img}) &TrustedGRUB MBR bootcode \\
|
|
TrustedGRUB kernel (\texttt{core.img}) &\texttt{diskboot.img} \\
|
|
GRUB modules + OS &TrustedGRUB kernel \\
|
|
Applications &OS (e.g. Linux IMA) \\
|
|
\end{tabular}
|
|
\end{center}
|
|
\end{frame}
|
|
|
|
\begin{frame}
|
|
\frametitle{Linux Integrity Measurement Architecture (IMA)
|
|
\footnote{\url{https://wiki.strongswan.org/projects/strongswan/wiki/IMA}}
|
|
\footnote{\url{https://sourceforge.net/p/linux-ima/wiki/Home/}}}
|
|
\begin{itemize}
|
|
\item Kernel extension for measuring accessed files
|
|
\item configurable via policies (access mode, files, users, \ldots)
|
|
\item standardized log file entries
|
|
\item extend PCR and create log file entry
|
|
\end{itemize}
|
|
\end{frame}
|
|
|
|
\begin{frame}
|
|
\frametitle{Attestation}
|
|
\begin{enumerate}
|
|
\item hash a number of PCR values (= \emph{Quote})
|
|
\item sign hash with TPM key
|
|
\item remote party validates signing key
|
|
\item remote party validates values of PCRs
|
|
\item remote party validates values of (IMA-)Event log
|
|
\end{enumerate}
|
|
\end{frame}
|
|
|
|
|
|
\begin{frame}
|
|
\frametitle{State of the Project: What is Done}
|
|
\begin{itemize}
|
|
\item small PC with dedicated TPM2 device
|
|
\item installed GRUB-TPM2
|
|
\item installed TPM2-ESAPI and development environment
|
|
\item read most parts of the book \emph{Trusted Computing Platforms -
|
|
TPM2.0 in Context} and implemented basic examples
|
|
\end{itemize}
|
|
\end{frame}
|
|
|
|
\begin{frame}
|
|
\frametitle{State of the Project: What is next}
|
|
\begin{itemize}
|
|
\item solve remaining problems with GRUB-TPM2
|
|
\item implementing more complex tasks with the TPM2
|
|
\item understanding \emph{Direct Anonymous Attestation} (DAA)
|
|
\item define and develop a trusted environment between BS and PA
|
|
\end{itemize}
|
|
\end{frame}
|
|
|
|
\begin{frame}
|
|
\frametitle{Questions}
|
|
\begin{itemize}
|
|
\item IMA also works for other system calls?
|
|
\item Details about CRTM
|
|
\end{itemize}
|
|
\end{frame}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
\end{document}
|
|
|