Carnegie Mellon University

Arvind Seshadri

Adrian Perrig

Leendert Van Doorn

Ning Qu

Mark Luk

Pradeep Khosla

A method, system, and apparatus for verifying integrity and execution state of an untrusted computer. In one embodiment, the method includes placing a verification function in memory on the untrusted computer; invoking the verification function from a trusted computer; determining a checksum value over memory containing both the verification function and the execution state of a processor and hardware on the untrusted computer; sending the checksum value to the trusted computer; determining at the trusted computer whether the checksum value is correct; and determining at the trusted computer whether the checksum value is received within an expected time period.

Verifying integrity and guaranteeing execution of code on untrusted computer platform

Systems and methods are provided for preventing unauthorized modification of an operating system. The system includes an operating system comprised of kernel code for controlling access to operation of a processing unit. The system further includes an enforcement agent executing at a higher privilege than the kernel code such that any changes to the kernel code are approved by the enforcement agent prior to execution.

Growing community of inventors

Pittsburgh, PA, United States of America

Arvind Seshadri