Trusted Network Connect

Network Access Enforcement Methods

• Configuration Assessment
  • Configuration measurement before network access is granted (e.g. installed software like antivirus scanner and firewall)
  • Compare measurements to network access policies ⇒ Integrity check of computer platform
  • Re-assess computer platforms in regular intervals
• Policy Enforcement: Enforce security policies on incompliant computer platforms

Trust Establishment in a Host (In His OS)

TNC Architecture with Platform Trust Service

Trusted Network Connect (TNC) Architecture

Building the Complete Picture (1): NEA RFC 5209

Interface (IF) Metadata Access Point

Traditional Approach: A Network of Silos

New Approach: Centralized Metadata Access Point (MAP) Service

IF-MAP Metadata for Network Security

• Metadata for:
  • Industrial Control Systems
  • Cloud Computing

---

Relevant Note(s):