• 主题
高级搜索  >
历史搜索 清空历史
首页> 外文会议>IEEE Symposium on Reliable Distributed Systems >US-AID: Unattended Scalable Attestation of IoT Devices
【24h】

US-AID: Unattended Scalable Attestation of IoT Devices

机译：美国国际开发署：无人值守的物联网设备可扩展认证

获取原文
页面导航
  • 摘要
  • 著录项
  • 相似文献
  • 相关主题

摘要

Embedded devices, personal gadgets and networks thereof are becoming increasingly pervasive, mainly due the advent of, and hype surrounding, the so-called Internet of Things (IoT). Such devices often perform critical actuation tasks, as well as collect, store and process sensitive data. Therefore, as confirmed by recent examples (such as the Mirai botnet), they also represent very attractive attack targets. To mitigate attacks, remote attestation (RA) has emerged as a distinct security service that aims at detecting malware presence on an embedded device. Most prior RA schemes focus on attesting a single devices and do not scale. In recent years, schemes for collective (group or swarm) RA have been designed. However, none is applicable to autonomous and dynamic network settings. This paper presents US-AID - the first collective attestation schemes for large autonomous dynamic networks of embedded devices. AID verifies overall network integrity by combining continuous in-network attestation with a key exchange mechanism and Proofs-of-non-Absence. Using device absence detection US-AID defends against physical attacks that require disconnecting attacked devices form the network for a non-negligible time. We demonstrate feasibility of US-AID with proof-of-concept implementation on state-of-the-art security architectures for low-end embedded devices and on an autonomous testbed formed of six drones. We also assess its scalability and practicality via extensive simulations.
机译：嵌入式设备，个人小工具及其网络正变得越来越普遍，这主要是由于所谓的物联网（IoT）的出现和大肆宣传。这样的设备通常执行关键的致动任务，以及收集，存储和处理敏感数据。因此，正如最近的示例（例如Mirai僵尸网络）所证实的那样，它们也代表了非常诱人的攻击目标。为了减轻攻击，远程证明（RA）已经成为一种独特的安全服务，旨在检测嵌入式设备上是否存在恶意软件。先前的大多数RA方案都专注于证明单个设备，并且无法扩展。近年来，已经设计了集体（群体或群体）RA的方案。但是，没有一项适用于自主和动态网络设置。本文介绍了US-AID-嵌入式设备大型自主动态网络的首个集体证明方案。 AID通过将连续的网络内证明与密钥交换机制和不存在证明相结合，来验证整个网络的完整性。使用设备缺失检测，US-AID可以防御物理攻击，这些物理攻击需要在不可忽略的时间内断开被攻击设备与网络的连接。我们在低端嵌入式设备的最新安全体系结构以及由六架无人机组成的自主测试平台上，通过概念验证实现了US-AID的可行性。我们还将通过广泛的仿真评估其可扩展性和实用性。

著录项

相似文献

  • 外文文献
  • 中文文献
  • 专利
获取原文

客服邮箱：kefu@zhangqiaokeyan.com

京公网安备：11010802029741号 ICP备案号：京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有

  • 客服微信

  • 服务号