A method for software trusted update on network security equipment

2019 2nd International Conference on Advanced Materials, Intelligent Manufacturing and Automation

Wang, Guan^1^2 ; Yan, Zhiwei^1^2 ; Chen, Jianzhong^1^2

Faculty of Information Technology, Beijing University of Technology, Beijing, Beijing

100124, China^1

Beijing Key Laboratory of Trusted Computing, Beijing University of Technology, Beijing, Beijing

100124, China^2

关键词: Large organizations;    Network environments;    Prototype designs;    Security equipments;    Security operations;    Security software;    Software versions;    Trusted execution environments;   

Others  :  https://iopscience.iop.org/article/10.1088/1757-899X/569/5/052086/pdf
DOI  :  10.1088/1757-899X/569/5/052086

来源: IOP

【 摘 要 】

Network security equipment plays an important role in preventing network security attacks. However, with the change of network environment and the upgrade of network attack means, the protection ability of the security software on the existing network security equipment will gradually decrease with time. For some large organizations or enterprises, their information security operations centers lack attention to software version control and software update processes for network security equipment, resulting in some security crises in the software update process. In this paper, we propose a method for software trusted update on network security equipment. This method can provide trusted identify authentication, secure data transmission and effective software version control. It enables the network security operations centers to more safely manage software update process on network security equipment. This method uses the functions of Trusted Cryptography Module to provide trusted execution environment. In this paper, we had introduced the process design, the prototype design and theoretical analysis to explain the feasibility and safety of this method.