Advanced Security Features of Intel vPro Technology.

Saved in:

Bibliographic Details
Title:	Advanced Security Features of Intel vPro Technology.
Authors:	Levy, Omer¹, Kumar, Arvind¹, Goel, Purushottam¹
Source:	Intel Technology Journal. Dec2008, Vol. 12 Issue 4, p229-238. 10p. 4 Diagrams, 1 Chart.
Subjects:	Intel computers, Technological innovations, Computer security, Data protection, Random access memory
Abstract:	Intel® vPro™ technology creates a powerful platform in which security and manageability go hand in hand. Since manageability is a crucial aspect of an enterprise's network, it is extremely important to secure the manageability infrastructure against attacks from outside and inside the network. In this article, we delve into some of the most interesting security features that make Intel vPro technology a far more secure (and thereby differentiated) offering than any other security technology on today's market. First we start with an overview of some of the basic security features of Intel vPro technology. Then, for most of the remainder of this article, we delve into some of the advanced and more complex security aspects of Intel vPro technology that truly put this technology above its competitors when it comes to providing security. We start with a detailed discussion of a few of the foundational security aspects of Intel vPro technology, provided by hardware mechanisms, such as true random numbers and monotonic counters. We then discuss the details of a secure storage service, which is an immensely useful firmware mechanism that allows storage of secrets on the nonvolatile flash memory, such that they cannot be read or tampered with, even if the flash part is physically attacked. Next we discuss the mechanism of firmware measurement. In this mechanism, the firmware provides a measurement of the code running on the internal processor. Finally, we discuss audit logging. This mechanism helps to mitigate the "rogue insider" problem. We show how the audit log, enabled with Intel vPro technology, is designed to prevent such an insider from abusing the power of this technology, and then covering his or her tracks. [ABSTRACT FROM AUTHOR]
	Copyright of Intel Technology Journal is the property of Intel Corporation and its content may not be copied or emailed to multiple sites without the copyright holder's express written permission. Additionally, content may not be used with any artificial intelligence tools or machine learning technologies. However, users may print, download, or email articles for individual use. This abstract may be abridged. No warranty is given about the accuracy of the copy. Users should refer to the original published version of the material for the full abstract. (Copyright applies to all Abstracts.)
Database:	Engineering Source

Description
Abstract:	Intel® vPro™ technology creates a powerful platform in which security and manageability go hand in hand. Since manageability is a crucial aspect of an enterprise's network, it is extremely important to secure the manageability infrastructure against attacks from outside and inside the network. In this article, we delve into some of the most interesting security features that make Intel vPro technology a far more secure (and thereby differentiated) offering than any other security technology on today's market. First we start with an overview of some of the basic security features of Intel vPro technology. Then, for most of the remainder of this article, we delve into some of the advanced and more complex security aspects of Intel vPro technology that truly put this technology above its competitors when it comes to providing security. We start with a detailed discussion of a few of the foundational security aspects of Intel vPro technology, provided by hardware mechanisms, such as true random numbers and monotonic counters. We then discuss the details of a secure storage service, which is an immensely useful firmware mechanism that allows storage of secrets on the nonvolatile flash memory, such that they cannot be read or tampered with, even if the flash part is physically attacked. Next we discuss the mechanism of firmware measurement. In this mechanism, the firmware provides a measurement of the code running on the internal processor. Finally, we discuss audit logging. This mechanism helps to mitigate the "rogue insider" problem. We show how the audit log, enabled with Intel vPro technology, is designed to prevent such an insider from abusing the power of this technology, and then covering his or her tracks. [ABSTRACT FROM AUTHOR]
ISSN:	1535864X