Trusted Software Constitution Model Based on Trust Engine

摘要

The guaranty of trustiness wasn't considered enough in traditional software development methods, the software developed in that methods lack effective measures for ensuring its trustiness. Combining agent technique with the support of trusted computing provided by TPM, a trusted software constitution model based on Trust Engine (TSCMTE) is demonstrated in this paper, Trust Engine extends the "chain of trust" of TCG into application, and cooperates with TPM to perform integrity measurement for software entity to ensure the static trustiness, then through verifying whether the dynamic behavior of software satisfies the trustiness constraints at runtime, Trust Engine guarantees the dynamic trustiness of software behavior. For the purpose of improving the accuracy of trustiness constraints, a strategy of determining the weights of characteristic attributes based on information entropy is proposed. Simulation experiments illustrate that the trustiness of software developed by the TSCMTE is improved effectively without performance degradation.