Cross-domain solution using network-connected hardware root-of-trust device

1. A system, comprising:

a Hardware Root of Trust (HRoT) device comprising a processor and memory, the HRoT device being configured for connection and authentication to first and second host devices which are configured to communicate via a first communication channel having a first security level and a second communication channel having a second security level which is more secure than the first security level,

wherein the HRoT device is configured to:

connect the first and second host devices via the second communication channel;

monitor security of the first and second host devices over the second communication channel;

detect a security attack to at least one of the first and second host devices; and

in response to the security attack, capture a current snapshot of at least one of the first and second host devices, and analyze the security attack based upon the captured current snapshot.

2. The system of claim 1 , wherein the HRoT device is further configured to:

transmit the captured current snapshot to a trusted element for analysis of the security attack.

3. The system of claim 2 , wherein the trusted element is configured to:

determine a cause of the security attack;

determine a counter-attack measure to address the security attack; and

distribute the counter-attack measure to at least one of the first and second host devices.

4. The system of claim 1 , wherein the HRoT device is configured to:

receive a security policy from a trusted element; and

monitor security of the first and second host devices based upon the security policy,

wherein the security policy comprises a plurality of procedures and rules to follow when a security risk is detected at the first and second host devices.

5. The system of claim 1 , wherein the HRoT device is further configured to:

store respective stable snapshots of the first and second host devices when the first and second host devices are validated; and

in response to that a security attack to at least one of the first and second host devices is detected, overwrite at least one of the first and second host devices with a respective stable snapshot.

6. The system of claim 1 , wherein the HRoT device is further configured to:

receive a request for a secure key information from at least one of the first and second host devices;

in response to that the secure key information is not stored in the HRoT device, request the secure key information to a key management server; and

provide the secure key information to the respective first or second host device.

7. The system of claim 1 , wherein the HRoT device is further configured to:

authenticate the first and second host devices before communicating with the first and second host devices.

8. The system of claim 1 , wherein the HRoT device is further configured to:

establish a binding to a respective Trusted Platform Module (TPM) of the first and second host devices; and

authenticate the first and second host devices by exchanging secure keys with the respective TPM of the first and second host devices.

9. The system of claim 1 , wherein the second communication channel comprises a Peripheral Component Interconnect Express (PCIe) bus.

10. The system of claim 1 , wherein at least one of the first and second communication channels is wireless.

11. A method running on a security device, the method comprising:

monitoring security of a first host device and a second host device, wherein the first and second host devices are configured to communicate via a first communication channel having a first security level and a second communication channel having a second security level which is more secure than the first security level and wherein the security device monitors the first and second host devices via the second communication channel;

taking respective stable snapshots of the first and second host devices when the first and second host devices are validated;

detecting a security attack to the first and second host devices; and

in response to the security attack to at least one of the first and second host devices:

capturing a current snapshot of the at least one of the first and second host devices where the security attack is detected;

analyzing the security attack based upon the captured current snapshot; and

overwriting the at least one of the first and second host devices with the respective stable snapshot.

12. The method of claim 11 , further comprising:

receiving a request for a secure key information from at least one of the first nd second host devices;

in response to that the secure key information is not stored in the security device, requesting the secure key information to a key management server; and

providing the secure key information to the respective first or second host device.

13. The method of claim 11 , further comprising:

determining a cause of the security attack based upon the captured current snapshot;

determining a counter-attack measure to address the security attack; and

distributing the counter-attack measure to at least one of the first and second host devices.

14. The method of claim 11 , wherein the security device comprises a Hardware Root of Trust (HRoT) device.

15. A system for security control, the system comprising:

a first host device comprising a first processor and memory; and

a security device coupled to the first host device over a communication channel, wherein the security device comprises a Command and Control Center (CCC) that is configured to:

monitor security of the first host device;

take a stable snapshot of the first host device when the first host device is validated;

detect a security attack to the first host device; and

in response to the security attack, capture a current snapshot of the first host device, analyze the security attack based upon the captured current snapshot, and overwrite the first host device with the stable snapshot.

16. The system of claim 15 , the CCC is further configured to:

determine a cause of the security attack based upon the captured current snapshot;

determine a counter-attack measure to address the security attack; and

distribute the counter-attack measure to the first host device.

17. The system of claim 15 , further comprising:

a second host device comprising a second processor and memory, wherein the first and second host devices are configured to communicate via a first communication channel having a first security level and a second communication channel having a second security level which is more secure than the first security level,

wherein the CCC is configured to:

monitor security of the first and second host devices via the second communication channel;

take respective stable snapshots of the first and second host devices;

detect a security attack to the first and second host devices when the first and second host devices are validated; and

in response to the security attack to at least one of the first and second host devices: capture a current snapshot of the at least one of the first and second host devices where the security attack is detected, analyze the security attack based upon the captured current snapshot, and overwrite the first or second host device with the respective stable snapshot.

18. The system of claim 15 , wherein the security device comprises a Hardware Root of Trust (HRoT) device.