Systematic Design of Minimalist Remote Attestation for Low-End Embedded Systems

Event details
Date | 02.06.2014 |
Hour | 15:15 |
Speaker | Gene TSUDIK, University of California, Irvine |
Location | |
Category | Conferences - Seminars |
In light of recent remote infestation malware attacks on specialized embedded systems, remote attestation has become a very timely and popular research topic. Remote attestation is the process of securely verifying internal state of a remote hardware platform. It can be achieved either statically (at boot time) or dynamically, at run-time. Generally, software-based attestation methods lack concrete security guarantees, while hardware-based approaches involve dedicated security co-processors that are too costly for low-end devices.
In this line of work, we pursue systematic design of a minimalist architecture based on bottom-up hardware/software co-design. Our work yields a a simple, efficient and secure approach for establishing a dynamic root of trust in a remote embedded device. It is aimed at low-end micro-controller units (MCUs) that lack specialized memory management or protection features. It requires minimal changes to existing MCUs and assumes few restrictions on adversarial capabilities.
In this line of work, we pursue systematic design of a minimalist architecture based on bottom-up hardware/software co-design. Our work yields a a simple, efficient and secure approach for establishing a dynamic root of trust in a remote embedded device. It is aimed at low-end micro-controller units (MCUs) that lack specialized memory management or protection features. It requires minimal changes to existing MCUs and assumes few restrictions on adversarial capabilities.
Links
Practical information
- General public
- Free
Organizer
- Jean-Pierre Hubaux
Contact
- Sylvie Thomet