Remote attestation with remediation

A non-transitory computer-readable medium storing instructions that, when executed by one or more processors, cause the one or more processors to:

• identify software components and associated metrics of the software components executing within a computing system of a vehicle according to a policy;
• construct a tree according to the software components and partitions within the software components;
• store, in leaf nodes of the tree, measurements of the metrics, wherein parent nodes define a hierarchical relationship between software components and the partitions;
• generate an incremental hash of the tree;
• provide the incremental hash as a secure representation of the software components;
• and
• update the tree and the incremental hash by recomputing hashes at parent nodes of the tree associated with changes in the metrics and adapting the incremental hash according to the changes.

A method, comprising:

• identifying software components and associated metrics of the software components executing within a computing system of a vehicle according to a policy;
• constructing a tree according to the software components and partitions within the software components;
• storing, in leaf nodes of the tree, measurements of the metrics, wherein parent nodes define a hierarchical relationship between software components and the partitions;
• generating an incremental hash of the tree;
• providing the incremental hash as a secure representation of the software components;
• and
• updating the tree and the incremental hash by recomputing hashes at parent nodes of the tree associated with changes in the metrics and adapting the incremental hash according to the changes.