Combating Evolving Cyber Threats with Attestation and Runtime Integrity

Panelists Mari Spina, Sr. Principal Cyber Security Engineer at MITRE, Jason Rogers, CEO of Invary, Gary Warner, Principal Cyber Architect at MITRE and Dr. Wesley Peck, CTO of Invary examined how attestation is evolving into a runtime capability that supports continuous verification. Panelists will discuss the role of attestation and runtime attestation across different layers of the system stack, how it is a necessary complement to existing cybersecurity controls and why it is increasingly relevant for detecting evolving AI threats and supply chain risk.

Attendees learned:

• What attestation is as a cybersecurity mechanism, including common misconceptions and how it differs from traditional monitoring and detection approaches.
• How attestation is used to establish system integrity across the system lifecycle, from initial verification through ongoing operational use.
• How attestation is evolving into runtime capabilities that support continuous verification, and why this evolution is necessary to address modern attack techniques.
• What runtime integrity adds beyond existing security controls, particularly for detecting post-boot compromise and software supply chain risk.
• How organizations in Department of Defense and state, local and education environments can practically think about adopting attestation and runtime integrity, including alignment with emerging security models such as confidential computing.