Control-Flow Attestation: Concepts, Solutions, and Open Challenges
Fuente:
arXiv
Gespeichert in:
| Hauptverfasser: | , , , |
|---|---|
| Format: | Preprint |
| Veröffentlicht: |
2024
|
| Schlagworte: | |
| Online-Zugang: | |
| Tags: |
Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
|
| _version_ | 1866913597706207232 |
|---|---|
| author | Sha, Zhanyu Shepherd, Carlton Rafi, Amir Markantonakis, Konstantinos |
| author_facet | Sha, Zhanyu Shepherd, Carlton Rafi, Amir Markantonakis, Konstantinos |
| contents | Control-flow attestation unifies the worlds of control-flow integrity and platform attestation by measuring and reporting a target's run-time behaviour to a verifier. Trust assurances in the target are provided by testing whether its execution follows an authorised control-flow path. The problem has been explored in various settings, such as assessing the trustworthiness of cloud platforms, cyber-physical systems, and Internet of Things devices. Despite a significant number of proposals being made in recent years, the area remains fragmented, with different adversarial behaviours, verification paradigms, and deployment challenges being addressed. In this paper, we present the first survey of control-flow attestation, examining the core ideas and solutions in state-of-the-art schemes. In total, we survey over 30 papers published between 2016--2024, consolidate and compare their key features, and pose several challenges and recommendations for future research in the area. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2408_06304 |
| institution | arXiv |
| publishDate | 2024 |
| record_format | arxiv |
| spellingShingle | Control-Flow Attestation: Concepts, Solutions, and Open Challenges Sha, Zhanyu Shepherd, Carlton Rafi, Amir Markantonakis, Konstantinos Cryptography and Security Hardware Architecture Emerging Technologies Control-flow attestation unifies the worlds of control-flow integrity and platform attestation by measuring and reporting a target's run-time behaviour to a verifier. Trust assurances in the target are provided by testing whether its execution follows an authorised control-flow path. The problem has been explored in various settings, such as assessing the trustworthiness of cloud platforms, cyber-physical systems, and Internet of Things devices. Despite a significant number of proposals being made in recent years, the area remains fragmented, with different adversarial behaviours, verification paradigms, and deployment challenges being addressed. In this paper, we present the first survey of control-flow attestation, examining the core ideas and solutions in state-of-the-art schemes. In total, we survey over 30 papers published between 2016--2024, consolidate and compare their key features, and pose several challenges and recommendations for future research in the area. |
| title | Control-Flow Attestation: Concepts, Solutions, and Open Challenges |
| topic | Cryptography and Security Hardware Architecture Emerging Technologies |
| url | https://arxiv.org/abs/2408.06304 |