Dynamic trust measurement model based on information track technology

To ensure the software´s trustworthiness when it receives data from outside during its execution, an information flow-based dynamic measurement model is proposed which expands the traditional Biba model. Differing from Biba model, our integrity policy defines when subjects accept low integrity input data, a control-flow-jump function is given to determine whether the input data will impact on the subject´s trust or not. The dynamic information flow tracking technology is used to track the software´s execution process. Relevant experiments and tests are made, and the efficiency and performance overhead of the dynamic measurement process are given. The result shows that the software dynamic measurement model can prevent some overflow attacks with acceptable performance overhead.