About cookies on this site Our websites require some cookies to function properly (required). In addition, other cookies may be used with your consent to analyze site usage, improve the user experience and for advertising. For more information, please review your options. By visiting our website, you agree to our processing of information as described in IBM’sprivacy statement. To provide a smooth navigation, your cookie preferences will be shared across the IBM web domains listed here.
Publication
Communications of the ACM
Review
Externally verifiable code execution
Abstract
The use of hardware and software technologies help to realize a primitive for externally verifiable code execution. This primitive allows an external entity to obtain assurance that an artibitrary piece of code executes untampered by any malware that may be present on an external computing device. Pionner is a software based technique in which the root of trust is established dynamical. The vulnerabilities in the software systems and the availability of tools for constructing exploit code has reduced the amount of effort required for attackers to introduce malware into computing devices. The computing device executes a self-checksumming verification function, which computes a checksum over its own instruction sequence. Externally verifiable code execution can be used as a building block to construct security applications that will empower users to use their computing device confidently.