1. A system, comprising: a network ( 110 , 135 ); a resource ( 145 ) connected to the network ( 110 , 135 ); a computer ( 105 ) connected to the network ( 110 , 135 ), including an integrity log generator ( 150 ) configured to generate an integrity log including a first plurality of signatures for a first plurality of modules, the integrity log including one signature in the first plurality of signatures for each module in the first plurality of modules; and an apparatus ( 140 , 160 ) connected to the network ( 110 , 135 ), including: a first database ( 205 ) configured to store a second plurality of signatures for a second plurality of modules; a receiver ( 210 ) configured to receive from the computer ( 105 ) the integrity log; a trust score generator ( 225 ) configured to generate a trust score based on a comparison of the integrity log with the second plurality of signatures; and a policy ( 230 ) programmed into the apparatus to control access to the resource ( 145 ), the policy ( 230 ) including a threshold score ( 235 , 240 ) for a machine to receive full access to the resource ( 145 ); wherein access to the resource ( 145 ) by the computer ( 105 ) is controlled by the policy ( 230 ).