attestation
AI security interview questions tagged attestation, across every topic.
5 questions · 0 unlocked for you
Concepts behind "attestation"
Explanations of the mechanisms these questions rely on.
Core
Secure Boot, Measured Boot and Remote Attestation in DepthSecure boot enforces: each stage runs the next only if it is signed and not revoked. Measured boot records: each stage extends a hash into a TPM register, blocking nothing by itself. Attestation proves that record to a remote verifier with a fresh nonce. A patched but still-signed boot component stays usable until it is revoked, which is why BlackLotus worked. PCR values break on every update, so policies use event logs or signatures. Confidential AI uses the same chain to release model weights only to attested machines. Systems & OS SecuritySign in
Core
Trusting a Mobile Client: Pinning, Tamper Detection and AttestationMobile client controls have different trust assumptions. Pinning narrows accepted TLS keys on an uncompromised client; root detection and anti-tamper checks raise effort but can be modified by an attacker who controls the app. Play Integrity and App Attest provide evidence that the server can verify and bind to an action, using different protocols. Good designs check request binding and freshness, combine attestation with fraud signals, and enforce authorization on the server. Hardware-backed keys and platform isolation remain useful within their own threat models. Mobile SecuritySign in