Managing startup of a data processing system using a startup policy
Methods and systems for managing operation of a data processing system are disclosed. To do so, during a startup of the data processing system, a startup policy may be obtained. The startup policy may indicate that a first portion of hardware components of the data processing system may be used to evaluate a security posture of the data processing system during startup and a second portion of the hardware components may not be used to evaluate the security posture during startup. A measurement process may be performed based on a security protocol and data model (SPDM) security standard for the first portion to obtain first measurements. The security posture may be evaluated using a trusted platform module based on the first measurements. Operation of the data processing system may be managed based on the security posture to reduce a likelihood of the data processing system being compromised.
1 . A method for managing operation of a data processing system, the method comprising:
during a startup of the data processing system:
obtaining a startup policy for the data processing system, the startup policy indicating that:
a first portion of hardware components of the data processing system is to be used to evaluate a security posture of the data processing system during the startup, and
a second portion of the hardware components is not to be used to evaluate the security posture of the data processing system during the startup;
performing, based on the startup policy and a security protocol and data model (SPDM) security standard, a first measurement process for the first portion of hardware components to obtain first measurements;
evaluating, using a trusted platform module (TPM), the security posture of the data processing system based on the first measurements and not using measurements of any of the second portion of the hardware components; and
managing operation of the data processing system based on the security posture to reduce a likelihood of the data processing system being compromised.
2 . The method of claim 1 , further comprising:
after the startup of the data processing system:
performing a second measurement process, based on the SPDM security standard, for the second portion of the hardware components to obtain second measurements;
updating the security posture of the data processing system based on the second measurements to obtain an updated security posture for the data processing system; and
managing the operation of the data processing system based on the updated security posture to reduce the likelihood of the data processing system being compromised.
3 . The method of claim 1 , wherein hardware components of the first portion of the hardware components and hardware components of the second portion of the hardware components are compliant with the SPDM security standard.
4 . The method of claim 1 , wherein second measurements are available to be obtained from the second portion of the hardware components at a time that the first measurement process is performed.
5 . The method of claim 1 , wherein members of the first portion of the hardware components and members of the second portion of the hardware components are chosen based on levels of risk to security of the data processing system corresponding to potential compromise of each of the hardware components of the data processing system.
6 . The method of claim 5 , wherein the members of the first portion of the hardware components pose a greater risk to the security of the data processing system if compromised than the members of the second portion of the hardware components.
7 . The method of claim 1 , wherein members of the first portion of the hardware components and members of the second portion of the hardware components are chosen based on likelihoods that changes have been made to each of the hardware components of the data processing system since a previous startup of the data processing system occurred.
8 . The method of claim 1 , wherein the startup policy and a list of hardware components of the data processing system that are compliant with a security protocol and data model (SPDM) security standard are obtained by a startup manager of the data processing system prior to performing the first measurement process.
9 . The method of claim 8 , wherein the startup manager is a basic input-output system (BIOS).
10 . The method of claim 8 , wherein the startup manager is hosted by a hardware processor of the data processing system, and the trusted platform module is a hardware component that is distinguishable from the hardware processor.
11 . The method of claim 1 , wherein the first measurements comprise first security data usable to validate authenticity and/or integrity of software hosted by the first portion of the hardware components.
12 . The method of claim 1 , wherein the SPDM security standard is a data model for hardware components of data processing systems, the SPDM security standard specifying, at least, methods of security communication between the hardware components, minimum standards of data to be made available to other hardware components, and security information to be made available to the other hardware components.
13 . The method of claim 1 , wherein managing operation of the data processing system comprises:
limiting, by the TPM, use of secrets by the data processing system based on the security posture of the data processing system.
14 . The method of claim 1 , wherein evaluating the security posture of the data processing system comprises:
checking integrity and/or authenticity of software hosted by the first portion of the hardware components using the first measurements and data structures trusted by the TPM.
15 . A non-transitory machine-readable medium having instructions stored therein, which when executed by a processor, cause the processor to perform operations for managing operation of a data processing system, the operations comprising:
during a startup of the data processing system:
obtaining a startup policy for the data processing system, the startup policy indicating that:
a first portion of hardware components of the data processing system is to be used to evaluate a security posture of the data processing system during the startup, and
a second portion of the hardware components is not to be used to evaluate the security posture of the data processing system during the startup;
performing, based on the startup policy and a security protocol and data model (SPDM) security standard, a first measurement process for the first portion of hardware components to obtain first measurements;
evaluating, using a trusted platform module (TPM), the security posture of the data processing system based on the first measurements and not using measurements of any of the second portion of the hardware components; and
managing operation of the data processing system based on the security posture to reduce a likelihood of the data processing system being compromised.
16 . The non-transitory machine-readable medium of claim 15 , wherein the operations further comprise:
after the startup of the data processing system:
performing a second measurement process, based on the SPDM security standard, for the second portion of the hardware components to obtain second measurements;
updating the security posture of the data processing system based on the second measurements to obtain an updated security posture for the data processing system; and
managing the operation of the data processing system based on the updated security posture to reduce the likelihood of the data processing system being compromised.
17 . The non-transitory machine-readable medium of claim 15 , wherein hardware components of the first portion of the hardware components and hardware components of the second portion of the hardware components are compliant with the SPDM security standard.
18 . A data processing system, comprising:
a processor; and
a memory coupled to the processor to store instructions, which when executed by the processor, cause the processor to perform operations for managing operation of a data processing system, the operations comprising:
during a startup of the data processing system:
obtaining a startup policy for the data processing system, the startup policy indicating that:
a first portion of hardware components of the data processing system is to be used to evaluate a security posture of the data processing system during the startup, and
a second portion of the hardware components is not to be used to evaluate the security posture of the data processing system during the startup;
performing, based on the startup policy and a security protocol and data model (SPDM) security standard, a first measurement process for the first portion of hardware components to obtain first measurements;
evaluating, using a trusted platform module (TPM), the security posture of the data processing system based on the first measurements and not using measurements of any of the second portion of the hardware components; and
managing operation of the data processing system based on the security posture to reduce a likelihood of the data processing system being compromised.
19 . The data processing system of claim 18 , wherein the operations further comprise:
after the startup of the data processing system:
performing a second measurement process, based on the SPDM security standard, for the second portion of the hardware components to obtain second measurements;
updating the security posture of the data processing system based on the second measurements to obtain an updated security posture for the data processing system; and
managing the operation of the data processing system based on the updated security posture to reduce the likelihood of the data processing system being compromised.
20 . The data processing system of claim 18 , wherein hardware components of the first portion of the hardware components and hardware components of the second portion of the hardware components are compliant with the SPDM security standard.