Verifying the integrity of a computing platform
At least a portion of a software image may be executed on a first instance of a computing platform. A first sequence of multi-dimensional execution states may be measured that the first instance of the computing platform passes through when executing the portion of the software image. The portion of the software image may then be executed on a second instance of the computing platform. A second sequence of multi-dimensional execution states may be measured that the second instance of the computing platform passes through when executing the portion of the software image. The integrity of the second instance of the computing platform may be verified with respect to the first instance of the computing platform by comparing the first sequence of multi-dimensional execution states with the second sequence of multi-dimensional execution states.
1. A method, comprising:
executing at least a portion of a software image on a first instance of a computing platform;
measuring a first sequence of multi-dimensional execution states that the first instance of the computing platform passes through when executing the portion of the software image;
executing the portion of the software image on a second instance of the computing platform;
measuring a second sequence of multi-dimensional execution states that the second instance of the computing platform passes through when executing the portion of the software image; and
verifying the integrity of the second instance of the computing platform with respect to the first instance of the computing platform by comparing the first sequence of multi-dimensional execution states with the second sequence of multi-dimensional execution states.
2. The method of claim 1 , wherein each multi-dimensional execution state comprises self-referential measurements along a number dimension, a time dimension, and a space dimension.
3. The method of claim 1 , further comprising storing the first sequence of multi-dimensional execution states in the software image.
4. The method of claim 1 , further comprising performing an action at the second instance of the computing platform based on said verifying the integrity of the second instance of the computing platform.
5. The method of claim 4 , wherein the action comprises resetting the second instance of the computing platform to a secure state.
6. The method of claim 4 , the action comprises activating software code embedded in the software image.
7. A non-transitory computer-readable storage medium storing instructions that, when executed by a computer, cause the computer to:
execute at least a portion of a software image on a first instance of a computing platform;
measure a first sequence of multi-dimensional execution states that the first instance of the computing platform passes through when executing the portion of the software image;
execute the portion of the software image on a second instance of the computing platform;
measure a second sequence of multi-dimensional execution states that the second instance of the computing platform passes through when executing the portion of the software image; and
verify the integrity of the second instance of the computing platform with respect to the first instance of the computing platform by comparing the first sequence of multi-dimensional execution states with the second sequence of multi-dimensional execution states.
8. The non-transitory computer-readable storage medium of claim 7 , wherein each multi-dimensional execution state comprises self-referential measurements along a number dimension, a time dimension, and a space dimension.
9. The non-transitory computer-readable storage medium of claim 7 , wherein the instructions, when executed by the computer, cause the computer to store the first sequence of multi-dimensional execution states in the software image.
10. The non-transitory computer-readable storage medium of claim 7 , wherein the instructions, when executed by the computer, cause the computer to perform an action at the second instance of the computing platform based on said verifying the integrity of the second instance of the computing platform.
11. The non-transitory computer-readable storage medium of claim 10 , wherein the action comprises resetting the second instance of the computing platform to a secure state.
12. The non-transitory computer-readable storage medium of claim 10 , the action comprises activating software code embedded in the software image.
13. An apparatus, comprising:
a processor; and
a non-transitory storage medium storing instructions that, when executed by the processor, cause the apparatus to:
execute at least a portion of a software image on a first instance of a computing platform;
measure a first sequence of multi-dimensional execution states that the first instance of the computing platform passes through when executing the portion of the software image;
execute the portion of the software image on a second instance of the computing platform;
measure a second sequence of multi-dimensional execution states that the second instance of the computing platform passes through when executing the portion of the software image; and
verify the integrity of the second instance of the computing platform with respect to the first instance of the computing platform by comparing the first sequence of multi-dimensional execution states with the second sequence of multi-dimensional execution states.
14. The apparatus of claim 13 , wherein each multi-dimensional execution state comprises self-referential measurements along a number dimension, a time dimension, and a space dimension.
15. The apparatus of claim 13 , wherein the instructions, when executed by the processor, cause the apparatus to store the first sequence of multi-dimensional execution states in the software image.
16. The apparatus of claim 13 , wherein the instructions, when executed by the processor, cause the apparatus to perform an action at the second instance of the computing platform based on said verifying the integrity of the second instance of the computing platform.
17. The apparatus of claim 16 , wherein the action comprises resetting the second instance of the computing platform to a secure state.
18. The apparatus of claim 16 , the action comprises activating software code embedded in the software image.