Towards Remotely Verifiable Software Integrity in Resource-Constrained IoT Devices
Fuente:
arXiv
Saved in:
| Main Authors: | , , , |
|---|---|
| Format: | Preprint |
| Published: |
2024
|
| Subjects: | |
| Online Access: | |
| Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
| _version_ | 1866911754407116800 |
|---|---|
| author | Nunes, Ivan De Oliveira Jakkamsetti, Sashidhar Rattanavipanon, Norrathep Tsudik, Gene |
| author_facet | Nunes, Ivan De Oliveira Jakkamsetti, Sashidhar Rattanavipanon, Norrathep Tsudik, Gene |
| contents | Lower-end IoT devices typically have strict cost constraints that rule out usual security mechanisms available in general-purpose computers or higher-end devices. To secure low-end devices, various low-cost security architectures have been proposed for remote verification of their software state via integrity proofs. These proofs vary in terms of expressiveness, with simpler ones confirming correct binary presence, while more expressive ones support verification of arbitrary code execution. This article provides a holistic and systematic treatment of this family of architectures. It also compares (qualitatively and quantitatively) the types of software integrity proofs, respective architectural support, and associated costs. Finally, we outline some research directions and emerging challenges. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2401_04308 |
| institution | arXiv |
| publishDate | 2024 |
| record_format | arxiv |
| spellingShingle | Towards Remotely Verifiable Software Integrity in Resource-Constrained IoT Devices Nunes, Ivan De Oliveira Jakkamsetti, Sashidhar Rattanavipanon, Norrathep Tsudik, Gene Cryptography and Security Lower-end IoT devices typically have strict cost constraints that rule out usual security mechanisms available in general-purpose computers or higher-end devices. To secure low-end devices, various low-cost security architectures have been proposed for remote verification of their software state via integrity proofs. These proofs vary in terms of expressiveness, with simpler ones confirming correct binary presence, while more expressive ones support verification of arbitrary code execution. This article provides a holistic and systematic treatment of this family of architectures. It also compares (qualitatively and quantitatively) the types of software integrity proofs, respective architectural support, and associated costs. Finally, we outline some research directions and emerging challenges. |
| title | Towards Remotely Verifiable Software Integrity in Resource-Constrained IoT Devices |
| topic | Cryptography and Security |
| url | https://arxiv.org/abs/2401.04308 |