ERASMUS: Efficient Remote Attestation via Self- Measurement for Unattended Settings
Xavier Carpent, Norrathep Rattanavipanon, Gene Tsudik

TL;DR
ERASMUS introduces a self-measurement approach for remote attestation, enabling unattended, time-sensitive, and safety-critical IoT devices to periodically verify their integrity without on-demand interaction.
Contribution
It proposes a novel self-measurement technique for remote attestation, addressing limitations of real-time methods in unattended and mobile IoT environments.
Findings
ERASMUS effectively detects malware in unattended devices.
The approach reduces energy and time costs compared to on-demand attestation.
It introduces the Quality of Attestation (QoA) metric for evaluating security performance.
Abstract
Remote attestation (RA) is a popular means of detecting malware in embedded and IoT devices. RA is usually realized as an interactive protocol, whereby a trusted party -- verifier -- measures integrity of a potentially compromised remote device -- prover. Early work focused on purely software-based and fully hardware-based techniques, neither of which is ideal for low-end devices. More recent results have yielded hybrid (SW/HW) security architectures comprised of a minimal set of features to support efficient and secure RA on low-end devices. All prior RA techniques require on-demand operation, i.e, RA is performed in real time. We identify some drawbacks of this general approach in the context of unattended devices: First, it fails to detect mobile malware that enters and leaves the prover between successive RA instances. Second, it requires the prover to engage in a potentially…
Peer Reviews
No public reviews on file for this paper yet. If you reviewed it on a platform where reviews are public (OpenReview, ICLR, NeurIPS, ICML), you can paste yours below so the community can read it here.
Videos
No videos yet. Explain this paper in a talk, walkthrough, or lecture? Add one.
