Trusted Software Constitution Model Based on Trust Engine

摘要

The guaranty of trustiness wasn’t consideredenough in traditional software development methods, thesoftware developed in that methods lack effective measuresfor ensuring its trustiness. Combining agent technique withthe support of trusted computing provided by TPM, atrusted software constitution model based on Trust Engine(TSCMTE) is demonstrated in this paper, Trust Engineextends the “chain of trust” of TCG into application, andcooperates with TPM to perform integrity measurement forsoftware entity to ensure the static trustiness, then throughverifying whether the dynamic behavior of software satisfiesthe trustiness constraints at runtime, Trust Engineguarantees the dynamic trustiness of software behavior. Forthe purpose of improving the accuracy of trustinessconstraints, a strategy of determining the weights ofcharacteristic attributes based on information entropy isproposed. Simulation experiments illustrate that thetrustiness of software developed by the TSCMTE isimproved effectively without performance degradation.