1. Instilling Malware that compromises the general OS. While such malware can tamper with sensor attestations, we enable detection of such tampering through signature verification. 

 

2. Malware may also modify all the software that runs on the machine (even the persistent copy of the trusted software), but such modifications will be detectable by using software attestation.

​

3. Side channel attacks attempt to infer the secrets (e.g., the signing key) of our trusted environment through covert channels.

​

4. Another class is tampering with the trusted computing hardware, such as the TPM. 

​

5. Finally, it is possible to manipulate the physical environment to create false sensor readings. 

​

We however will focus on the first two software attacks.