Remote attestation based on runtime configuration
A method of attestation of a host machine based on runtime configuration of the host machine is provided. The method receives, at an attestation machine, a request from the host machine for attestation of a software executing on the host machine, the request including at least one security-related configuration of the software at launch time and a corresponding runtime behavior of the software when the security-related configuration changes. The method then generates a claim based on evaluating a value associated with the at least one security-related configuration and the corresponding runtime behavior of the software when the value changes. The method also generates an attestation token after a successful attestation of the software and include in the attestation token the generated claim. The method further transmits the attestation token to the host machine.
1. A method of attestation of a host machine based on runtime configuration of the host machine, comprising:
receiving, at an attestation machine, a request from the host machine for attestation of a software executing on the host machine, the request comprising a value associated with a security-related configuration of the software at launch time and a corresponding runtime behavior of the software when the value associated with the security-related configuration changes;
generating a claim based on evaluating the value associated with the security-related configuration and the corresponding runtime behavior of the software when the value associated with the security-related configuration changes;
generating an attestation token after a successful attestation of the software, the attestation token including the generated claim; and
transmitting the attestation token to the host machine.
2. The method of claim 1 , wherein the request from the host machine comprises an event log associated with an execution of the software at the launch time, the event log comprising a plurality of entries at least one of which is associated with the security-related configuration and the corresponding runtime behavior of the software.
3. The method of claim 2 , wherein the event log further comprises metadata associated with the software, the metadata comprising a plurality of hashes associated with a plurality of components of the software executed at the launch time, wherein the successful attestation of the software comprises a successful matching of at least one of the plurality of hashes against a corresponding hash stored at the attestation machine.
4. The method of claim 1 , wherein the security-related configuration comprises remote or local console access configuration of the host machine, and the corresponding runtime behavior of the software when the value associated with the security-related configuration changes comprises discarding the attestation token.
5. The method of claim 4 , wherein generating the claim comprises generating the claim when evaluating the value associated with the security-related configuration at the launch time indicates that the local or remote console access is disabled.
6. The method of claim 5 , wherein if, at runtime, the local or remote console access is enabled, the host machine discards the attestation token.
7. The method of claim 1 , wherein the security-related configuration comprises an attestation status configuration of the software, and the corresponding runtime behavior of the software when the value associated with the security-related configuration changes comprises removing one or more encryption keys the host machine received based on the attestation token.
8. The method of claim 1 , wherein the attestation token comprises a JSON web token (JWT) and the generated claim is part of a payload of the JWT.
9. A non-transitory computer readable medium comprising instructions that, when executed by one or more processors of a computing system, cause the computing system to perform a method of attestation of a host machine based on runtime configuration of the host machine, the method comprising:
receiving, at an attestation machine, a request from the host machine for attestation of a software executing on the host machine, the request comprising a value associated with a security-related configuration of the software at launch time and a corresponding runtime behavior of the software when the value associated with the security-related configuration changes;
generating a claim based on evaluating the value associated with the security-related configuration and the corresponding runtime behavior of the software when the value associated with the security-related configuration changes;
generating an attestation token after a successful attestation of the software, the attestation token including the generated claim; and
transmitting the attestation token to the host machine.
10. The non-transitory computer readable medium of claim 9 , wherein the request from the host machine comprises an event log associated with an execution of the software at the launch time, the event log comprising a plurality of entries at least one of which is associated with the security-related configuration and the corresponding runtime behavior of the software.
11. The non-transitory computer readable medium of claim 10 , wherein the event log further comprises metadata associated with the software, the metadata comprising a plurality of hashes associated with a plurality of components of the software executed at the launch time, wherein the successful attestation of the software comprises a successful matching of at least one of the plurality of hashes against a corresponding hash stored at the attestation machine.
12. The non-transitory computer readable medium of claim 9 , wherein the security-related configuration comprises remote or local console access configuration of the host machine, and the corresponding runtime behavior of the software when the value associated with the security-related configuration changes comprises discarding the attestation token.
13. The non-transitory computer readable medium of claim 12 , wherein generating the claim comprises generating the claim when evaluating the value associated with the security-related configuration at the launch time indicates that the local or remote console access is disabled.
14. The non-transitory computer readable medium of claim 13 , wherein if, at runtime, the local or remote console access is enabled, the host machine discards the attestation token.
15. The non-transitory computer readable medium of claim 9 , wherein the security-related configuration comprises an attestation status configuration of the software, and the corresponding runtime behavior of the software when the value associated with the security-related configuration changes comprises removing one or more encryption keys the host machine received based on the attestation token.
16. A computer system, comprising:
a memory; and
a processor coupled to the memory, the processor being configured to cause the computer system to:
receive, at an attestation machine, a request from a host machine for attestation of a software executing on the host machine, the request comprising a value associated with a security-related configuration of the software at launch time and a corresponding runtime behavior of the software when the value associated with the security-related configuration changes;
generate a claim based on evaluating the value associated with the security-related configuration and the corresponding runtime behavior of the software when the value associated with the security-related configuration changes;
generate an attestation token after a successful attestation of the software, the attestation token including the generated claim; and
transmit the attestation token to the host machine.
17. The computer system of claim 16 , wherein the request from the host machine comprises an event log associated with an execution of the software at the launch time, the event log comprising a plurality of entries at least one of which is associated with the security-related configuration and the corresponding runtime behavior of the software.
18. The computer system of claim 16 , wherein the security-related configuration comprises remote or local console access configuration of the host machine, and the corresponding runtime behavior of the software when the value associated with the security-related configuration changes comprises discarding the attestation token.
19. The computer system of claim 16 , wherein the security-related configuration comprises an attestation status configuration of the software, and the corresponding runtime behavior of the software when the value associated with the security-related configuration changes comprises removing one or more encryption keys the host machine received based on the attestation token.
20. The computer system of claim 16 , wherein the attestation token comprises a JSON web token (JWT) and the generated claim is part of a payload of the JWT.