Trusted disk loading in the Emulab network testbed

摘要: Network testbeds like Emulab allocate physical computers to users for the duration of an experiment. During experiment, a user has nearly unfettered access devices under his or her control. Thus, at end allocated computer can be in arbitrary state. A testbed must reclaim and ensure they are properly configured future experiments. This is particularly important security-related experiments: example, that malware cannot persist on device from one experiment another. This paper presents prototype trusted disk-loading system (TDLS) we have implemented Emulab. When allocates PC TDLS ensures if set-up succeeds, boot operating specified by user. The uses Trusted Platform Module (TPM) securely communicate with Emulab's control infrastructure attest about PC's configuration. prevents state surviving another, it impersonating another. addresses challenges providing scalable flexible service, which allows large support wide range systems research. We describe these challenges, detail our Emulab, present lessons learned its construction.