Testing and evaluation of a secure integrity measurement system (SIMS) for remote systems

We have designed a novel system called a Secure Integrity Measurement System (SIMS) to provide a practical integrity for flexible and traditional remote systems. SIMS is not only targeted for Linux, but it can also be used for different operating systems such as Windows, and UNIX. All and executable content that are loaded onto any operating system is measured before execution. These measurements are protected by a secure Database Management System (DBMS) rather than using Trusted Platform Module (TPM) that is part of the Trusted Computing Group (TCG) standards. The proposed system can measure the executable content from the BIOS and the content that is generated at the application layer. Note our system does not require any special hardware such TCG or a new CPU mode or an operating system. In this paper, a set of experiments are carried out to meet the security and performance objectives. We have shown with the system evaluation that the SIMS can provide a tamper detection, and recovery to different kinds of content. The SIMS can efficiently and correctly determine if the executable content has been tampered with.