Learn
active
TPM-Attest: TPM 2.0 + IMA as kernel-level anti-cheat replacement for Linux
- Engineer — Learn: The attestation architecture — binding TPM quotes to server nonces, constructing Merkle trees over IMA logs, and using LD_PRELOAD to intercept SDK calls — offers transferable patterns for zero-trust device health and supply-chain integrity checks, though no running systems need changes today.
- SOC/IR — Skip
- Leader — Skip
This entry was curated and judged by AI (Claude) with automated enrichment
(CISA KEV / EPSS / public PoC). Verify against the original source before
acting. Found a bad verdict?
Report it —
confirmed errors go to the corrections log.