Realizing Macro Based Technique for Behavioral Attestation on Remote Platform

Alhuseen Omar Alsayed; Muhammad Binsawad; Jawad Ali; Ahmad Shahrafidz Khalid; Waqas Ahmed

doi:10.1007/978-3-030-55180-3_10

Realizing Macro Based Technique for Behavioral Attestation on Remote Platform

Alhuseen Omar Alsayed
, Muhammad Binsawad
, Jawad Ali^*
, Ahmad Shahrafidz Khalid
, Waqas Ahmed

^*Corresponding author for this work

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

Abstract

In Trusted Computing, the client platform is checked for its trustworthiness using Remote Attestation. Integrity Measurement Architecture (IMA) is a well-known technique of TCG based attestation. However, due to static nature of IMA, it cannot be aware of the runtime behavior of applications which leads to integrity problems. To overcome this problem several dynamic behavior-based attestation techniques have been proposed that can measure the run-time behavior of applications by capturing all system-calls produced by them. In this paper, we have proposed a system call based technique of intrusion detection for remote attestation in which macros are used for reporting. Macros are used to denote subsequences of system calls of variable length. The basic goal of this paper is to shorten the number of system calls by the concept of macros which ultimately reduces the processing time as well as network overhead.

Original language	English
Title of host publication	Intelligent Systems and Applications - Proceedings of the 2020 Intelligent Systems Conference IntelliSys Volume 1
Editors	Kohei Arai, Supriya Kapoor, Rahul Bhatia
Publisher	Springer
Pages	132-144
Number of pages	13
ISBN (Print)	9783030551797
DOIs	https://doi.org/10.1007/978-3-030-55180-3_10
State	Published - 2021
Externally published	Yes

Publication series

Name	Advances in Intelligent Systems and Computing
Volume	1250 AISC
ISSN (Print)	2194-5357
ISSN (Electronic)	2194-5365

Bibliographical note

Publisher Copyright:
© 2021, Springer Nature Switzerland AG.

Keywords

Dynamic behavior
Intrusion detection
Remote attestation
Trusted computing

ASJC Scopus subject areas

Control and Systems Engineering
General Computer Science

Access to Document

10.1007/978-3-030-55180-3_10

Cite this

Alsayed, A. O., Binsawad, M., Ali, J., Khalid, A. S., & Ahmed, W. (2021). Realizing Macro Based Technique for Behavioral Attestation on Remote Platform. In K. Arai, S. Kapoor, & R. Bhatia (Eds.), Intelligent Systems and Applications - Proceedings of the 2020 Intelligent Systems Conference IntelliSys Volume 1 (pp. 132-144). (Advances in Intelligent Systems and Computing; Vol. 1250 AISC). Springer. https://doi.org/10.1007/978-3-030-55180-3_10

Alsayed, Alhuseen Omar ; Binsawad, Muhammad ; Ali, Jawad et al. / Realizing Macro Based Technique for Behavioral Attestation on Remote Platform. Intelligent Systems and Applications - Proceedings of the 2020 Intelligent Systems Conference IntelliSys Volume 1. editor / Kohei Arai ; Supriya Kapoor ; Rahul Bhatia. Springer, 2021. pp. 132-144 (Advances in Intelligent Systems and Computing).

@inproceedings{4169ca6a12884ff4bc7299f9e46c4346,

title = "Realizing Macro Based Technique for Behavioral Attestation on Remote Platform",

abstract = "In Trusted Computing, the client platform is checked for its trustworthiness using Remote Attestation. Integrity Measurement Architecture (IMA) is a well-known technique of TCG based attestation. However, due to static nature of IMA, it cannot be aware of the runtime behavior of applications which leads to integrity problems. To overcome this problem several dynamic behavior-based attestation techniques have been proposed that can measure the run-time behavior of applications by capturing all system-calls produced by them. In this paper, we have proposed a system call based technique of intrusion detection for remote attestation in which macros are used for reporting. Macros are used to denote subsequences of system calls of variable length. The basic goal of this paper is to shorten the number of system calls by the concept of macros which ultimately reduces the processing time as well as network overhead.",

keywords = "Dynamic behavior, Intrusion detection, Remote attestation, Trusted computing",

author = "Alsayed, \{Alhuseen Omar\} and Muhammad Binsawad and Jawad Ali and Khalid, \{Ahmad Shahrafidz\} and Waqas Ahmed",

note = "Publisher Copyright: {\textcopyright} 2021, Springer Nature Switzerland AG.",

year = "2021",

doi = "10.1007/978-3-030-55180-3\_10",

language = "English",

isbn = "9783030551797",

series = "Advances in Intelligent Systems and Computing",

publisher = "Springer",

pages = "132--144",

editor = "Kohei Arai and Supriya Kapoor and Rahul Bhatia",

booktitle = "Intelligent Systems and Applications - Proceedings of the 2020 Intelligent Systems Conference IntelliSys Volume 1",

address = "Germany",

}

Alsayed, AO, Binsawad, M, Ali, J, Khalid, AS & Ahmed, W 2021, Realizing Macro Based Technique for Behavioral Attestation on Remote Platform. in K Arai, S Kapoor & R Bhatia (eds), Intelligent Systems and Applications - Proceedings of the 2020 Intelligent Systems Conference IntelliSys Volume 1. Advances in Intelligent Systems and Computing, vol. 1250 AISC, Springer, pp. 132-144. https://doi.org/10.1007/978-3-030-55180-3_10

Realizing Macro Based Technique for Behavioral Attestation on Remote Platform. / Alsayed, Alhuseen Omar; Binsawad, Muhammad; Ali, Jawad et al.
Intelligent Systems and Applications - Proceedings of the 2020 Intelligent Systems Conference IntelliSys Volume 1. ed. / Kohei Arai; Supriya Kapoor; Rahul Bhatia. Springer, 2021. p. 132-144 (Advances in Intelligent Systems and Computing; Vol. 1250 AISC).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › peer-review

TY - GEN

T1 - Realizing Macro Based Technique for Behavioral Attestation on Remote Platform

AU - Alsayed, Alhuseen Omar

AU - Binsawad, Muhammad

AU - Ali, Jawad

AU - Khalid, Ahmad Shahrafidz

AU - Ahmed, Waqas

PY - 2021

Y1 - 2021

N2 - In Trusted Computing, the client platform is checked for its trustworthiness using Remote Attestation. Integrity Measurement Architecture (IMA) is a well-known technique of TCG based attestation. However, due to static nature of IMA, it cannot be aware of the runtime behavior of applications which leads to integrity problems. To overcome this problem several dynamic behavior-based attestation techniques have been proposed that can measure the run-time behavior of applications by capturing all system-calls produced by them. In this paper, we have proposed a system call based technique of intrusion detection for remote attestation in which macros are used for reporting. Macros are used to denote subsequences of system calls of variable length. The basic goal of this paper is to shorten the number of system calls by the concept of macros which ultimately reduces the processing time as well as network overhead.

AB - In Trusted Computing, the client platform is checked for its trustworthiness using Remote Attestation. Integrity Measurement Architecture (IMA) is a well-known technique of TCG based attestation. However, due to static nature of IMA, it cannot be aware of the runtime behavior of applications which leads to integrity problems. To overcome this problem several dynamic behavior-based attestation techniques have been proposed that can measure the run-time behavior of applications by capturing all system-calls produced by them. In this paper, we have proposed a system call based technique of intrusion detection for remote attestation in which macros are used for reporting. Macros are used to denote subsequences of system calls of variable length. The basic goal of this paper is to shorten the number of system calls by the concept of macros which ultimately reduces the processing time as well as network overhead.

KW - Dynamic behavior

KW - Intrusion detection

KW - Remote attestation

KW - Trusted computing

UR - https://www.scopus.com/pages/publications/85090176573

U2 - 10.1007/978-3-030-55180-3_10

DO - 10.1007/978-3-030-55180-3_10

M3 - Conference contribution

AN - SCOPUS:85090176573

SN - 9783030551797

T3 - Advances in Intelligent Systems and Computing

SP - 132

EP - 144

BT - Intelligent Systems and Applications - Proceedings of the 2020 Intelligent Systems Conference IntelliSys Volume 1

A2 - Arai, Kohei

A2 - Kapoor, Supriya

A2 - Bhatia, Rahul

PB - Springer

ER -

Alsayed AO, Binsawad M, Ali J, Khalid AS, Ahmed W. Realizing Macro Based Technique for Behavioral Attestation on Remote Platform. In Arai K, Kapoor S, Bhatia R, editors, Intelligent Systems and Applications - Proceedings of the 2020 Intelligent Systems Conference IntelliSys Volume 1. Springer. 2021. p. 132-144. (Advances in Intelligent Systems and Computing). doi: 10.1007/978-3-030-55180-3_10

Realizing Macro Based Technique for Behavioral Attestation on Remote Platform

Abstract

Publication series

Bibliographical note

Keywords

ASJC Scopus subject areas

Access to Document

Fingerprint

Cite this