Advanced Security Features of Intel vPro Technology.

Saved in:
Bibliographic Details
Title: Advanced Security Features of Intel vPro Technology.
Authors: Levy, Omer1, Kumar, Arvind1, Goel, Purushottam1
Source: Intel Technology Journal. Dec2008, Vol. 12 Issue 4, p229-238. 10p. 4 Diagrams, 1 Chart.
Subjects: Intel computers, Technological innovations, Computer security, Data protection, Random access memory
Abstract: Intel® vPro™ technology creates a powerful platform in which security and manageability go hand in hand. Since manageability is a crucial aspect of an enterprise's network, it is extremely important to secure the manageability infrastructure against attacks from outside and inside the network. In this article, we delve into some of the most interesting security features that make Intel vPro technology a far more secure (and thereby differentiated) offering than any other security technology on today's market. First we start with an overview of some of the basic security features of Intel vPro technology. Then, for most of the remainder of this article, we delve into some of the advanced and more complex security aspects of Intel vPro technology that truly put this technology above its competitors when it comes to providing security. We start with a detailed discussion of a few of the foundational security aspects of Intel vPro technology, provided by hardware mechanisms, such as true random numbers and monotonic counters. We then discuss the details of a secure storage service, which is an immensely useful firmware mechanism that allows storage of secrets on the nonvolatile flash memory, such that they cannot be read or tampered with, even if the flash part is physically attacked. Next we discuss the mechanism of firmware measurement. In this mechanism, the firmware provides a measurement of the code running on the internal processor. Finally, we discuss audit logging. This mechanism helps to mitigate the "rogue insider" problem. We show how the audit log, enabled with Intel vPro technology, is designed to prevent such an insider from abusing the power of this technology, and then covering his or her tracks. [ABSTRACT FROM AUTHOR]
Copyright of Intel Technology Journal is the property of Intel Corporation and its content may not be copied or emailed to multiple sites without the copyright holder's express written permission. Additionally, content may not be used with any artificial intelligence tools or machine learning technologies. However, users may print, download, or email articles for individual use. This abstract may be abridged. No warranty is given about the accuracy of the copy. Users should refer to the original published version of the material for the full abstract. (Copyright applies to all Abstracts.)
Database: Engineering Source
FullText Links:
  – Type: pdflink
Text:
  Availability: 0
Header DbId: egs
DbLabel: Engineering Source
An: 36314658
AccessLevel: 6
PubType: Academic Journal
PubTypeId: academicJournal
PreciseRelevancyScore: 0
IllustrationInfo
Items – Name: Title
  Label: Title
  Group: Ti
  Data: Advanced Security Features of Intel vPro Technology.
– Name: Author
  Label: Authors
  Group: Au
  Data: <searchLink fieldCode="AR" term="%22Levy%2C+Omer%22">Levy, Omer</searchLink><relatesTo>1</relatesTo><br /><searchLink fieldCode="AR" term="%22Kumar%2C+Arvind%22">Kumar, Arvind</searchLink><relatesTo>1</relatesTo><br /><searchLink fieldCode="AR" term="%22Goel%2C+Purushottam%22">Goel, Purushottam</searchLink><relatesTo>1</relatesTo>
– Name: TitleSource
  Label: Source
  Group: Src
  Data: <searchLink fieldCode="JN" term="%22Intel+Technology+Journal%22">Intel Technology Journal</searchLink>. Dec2008, Vol. 12 Issue 4, p229-238. 10p. 4 Diagrams, 1 Chart.
– Name: Subject
  Label: Subjects
  Group: Su
  Data: <searchLink fieldCode="DE" term="%22Intel+computers%22">Intel computers</searchLink><br /><searchLink fieldCode="DE" term="%22Technological+innovations%22">Technological innovations</searchLink><br /><searchLink fieldCode="DE" term="%22Computer+security%22">Computer security</searchLink><br /><searchLink fieldCode="DE" term="%22Data+protection%22">Data protection</searchLink><br /><searchLink fieldCode="DE" term="%22Random+access+memory%22">Random access memory</searchLink>
– Name: Abstract
  Label: Abstract
  Group: Ab
  Data: Intel® vPro™ technology creates a powerful platform in which security and manageability go hand in hand. Since manageability is a crucial aspect of an enterprise's network, it is extremely important to secure the manageability infrastructure against attacks from outside and inside the network. In this article, we delve into some of the most interesting security features that make Intel vPro technology a far more secure (and thereby differentiated) offering than any other security technology on today's market. First we start with an overview of some of the basic security features of Intel vPro technology. Then, for most of the remainder of this article, we delve into some of the advanced and more complex security aspects of Intel vPro technology that truly put this technology above its competitors when it comes to providing security. We start with a detailed discussion of a few of the foundational security aspects of Intel vPro technology, provided by hardware mechanisms, such as true random numbers and monotonic counters. We then discuss the details of a secure storage service, which is an immensely useful firmware mechanism that allows storage of secrets on the nonvolatile flash memory, such that they cannot be read or tampered with, even if the flash part is physically attacked. Next we discuss the mechanism of firmware measurement. In this mechanism, the firmware provides a measurement of the code running on the internal processor. Finally, we discuss audit logging. This mechanism helps to mitigate the "rogue insider" problem. We show how the audit log, enabled with Intel vPro technology, is designed to prevent such an insider from abusing the power of this technology, and then covering his or her tracks. [ABSTRACT FROM AUTHOR]
– Name: AbstractSuppliedCopyright
  Label:
  Group: Ab
  Data: <i>Copyright of Intel Technology Journal is the property of Intel Corporation and its content may not be copied or emailed to multiple sites without the copyright holder's express written permission. Additionally, content may not be used with any artificial intelligence tools or machine learning technologies. However, users may print, download, or email articles for individual use. This abstract may be abridged. No warranty is given about the accuracy of the copy. Users should refer to the original published version of the material for the full abstract.</i> (Copyright applies to all Abstracts.)
PLink https://search.ebscohost.com/login.aspx?direct=true&site=eds-live&db=egs&AN=36314658
RecordInfo BibRecord:
  BibEntity:
    Languages:
      – Code: eng
        Text: English
    PhysicalDescription:
      Pagination:
        PageCount: 10
        StartPage: 229
    Subjects:
      – SubjectFull: Intel computers
        Type: general
      – SubjectFull: Technological innovations
        Type: general
      – SubjectFull: Computer security
        Type: general
      – SubjectFull: Data protection
        Type: general
      – SubjectFull: Random access memory
        Type: general
    Titles:
      – TitleFull: Advanced Security Features of Intel vPro Technology.
        Type: main
  BibRelationships:
    HasContributorRelationships:
      – PersonEntity:
          Name:
            NameFull: Levy, Omer
      – PersonEntity:
          Name:
            NameFull: Kumar, Arvind
      – PersonEntity:
          Name:
            NameFull: Goel, Purushottam
    IsPartOfRelationships:
      – BibEntity:
          Dates:
            – D: 01
              M: 12
              Text: Dec2008
              Type: published
              Y: 2008
          Identifiers:
            – Type: issn-print
              Value: 1535864X
          Numbering:
            – Type: volume
              Value: 12
            – Type: issue
              Value: 4
          Titles:
            – TitleFull: Intel Technology Journal
              Type: main
ResultId 1