Remote attestation for securing

large embedded devices' networks

Course Speaker
Computer and Network Security Alessandro Visintin
Date Email
21 October 2020 alevise.public@gmail.com
 Remote attestation for securing
large embedded devices’ networks

Attestation

The activity of making a claim about

properties of a prover by supplying
evidence to a verifier.
 Remote attestation for securing
large embedded devices’ networks

Attestation

The activity of making a claim about

properties of a prover by supplying
evidence to a verifier.
 Remote attestation for securing
large embedded devices’ networks

The activity of making a claim about

properties of a prover by supplying
evidence to a verifier.

The protection of a device.

 Remote attestation for securing
large embedded devices’ networks

The activity of making a claim about

properties of a prover by supplying
evidence to a verifier.

A particular set of values

we want to protect.
 Remote attestation for securing
large embedded devices’ networks

The activity of making a claim about

properties of a prover by supplying
evidence to a verifier.

The controlled device.

 Remote attestation for securing
large embedded devices’ networks

The activity of making a claim about

properties of a prover by supplying
evidence to a verifier.

A proof of clean state.

 Remote attestation for securing
large embedded devices’ networks

The activity of making a claim about

properties of a prover by supplying
evidence to a verifier.

The controlling device.

 Remote attestation for securing
large embedded devices’ networks

Attestation

+ + + +
 Remote attestation for securing
large embedded devices’ networks

Remote Attestation

?
 Remote attestation for securing
large embedded devices’ networks

Remote Attestation

The activity of making a claim about The activity of making a claim about
properties of a prover by supplying properties of a prover by supplying
evidence to a verifier. evidence to a remote verifier.
 Remote attestation for securing
large embedded devices’ networks

Remote Attestation
Verifier and prover are separate
entities that communicate remotely.
 Remote attestation for securing
large embedded devices’ networks

What if we had
a network to control?
 Remote attestation for securing
large embedded devices’ networks

What if we had
a network to control?
 Remote attestation for securing
large embedded devices’ networks

Scalability
What if we had
a network to control? Heterogeneity
Physical attacks
 Remote attestation for securing
large embedded devices’ networks

Scalability
The attestations’ cost should be
Heterogeneity independent from the network’s size.
Physical attacks
 Remote attestation for securing
large embedded devices’ networks

Scalability
The protocol should be runnable on
Heterogeneity different devices.
Physical attacks
 Remote attestation for securing
large embedded devices’ networks

Scalability
The devices should be protected from
Heterogeneity physical access.
Physical attacks
 Remote attestation for securing
large embedded devices’ networks

Congrats!

You just owned

Remote attestation for securing large
embedded devices’ networks
 Remote attestation for securing
large embedded devices’ networks

A recap of latest research

 Remote attestation for securing
large embedded devices’ networks

Sparsely connected network Fully connected network

 Remote attestation for securing
large embedded devices’ networks

Sparsely connected network

The request is initiated by one node
The node forwards it to neighbors
The process is iterated up to the leaves
 Remote attestation for securing
large embedded devices’ networks

Sparsely connected network

The request is initiated by one node
The node forwards it to neighbors
The process is iterated up to the leaves
 Remote attestation for securing
large embedded devices’ networks

Sparsely connected network

The request is initiated by one node
The node forwards it to neighbors
The process is iterated up to the leaves
 Remote attestation for securing
large embedded devices’ networks

Sparsely connected network

Each leaf sends back its proof
Previous nodes receives the proofs and
aggregate them with theirs
The process is iterated up to the root
 Remote attestation for securing
large embedded devices’ networks

Sparsely connected network

Each leaf sends back its proof
Previous nodes receives the proofs and
aggregate them with theirs
The process is iterated up to the root
 Remote attestation for securing
large embedded devices’ networks

Sparsely connected network

Each leaf sends back its proof
Previous nodes receives the proofs and
aggregate them with theirs
The process is iterated up to the root
 Remote attestation for securing
large embedded devices’ networks

Sparsely connected network

 Remote attestation for securing
large embedded devices’ networks

Aggregation efficacy
Sparsely connected network Aggregation efficiency
Some open issues Disrupted links
Physical attacks
 Remote attestation for securing
large embedded devices’ networks

Aggregation efficacy
Sparsely connected network Aggregation efficiency
Some open issues Disrupted links
Physical attacks
 Remote attestation for securing
large embedded devices’ networks

Aggregation efficacy
Sparsely connected network Aggregation efficiency
Some open issues Disrupted links
Physical attacks
 Remote attestation for securing
large embedded devices’ networks

Aggregation efficacy
Sparsely connected network Aggregation efficiency
Some open issues Disrupted links
Physical attacks
 Remote attestation for securing
large embedded devices’ networks

Fully connected network

An uncharted sea
 Remote attestation for securing
large embedded devices’ networks

Why diving into More simple

fully connected networks?
Broadly available
 Remote attestation for securing
large embedded devices’ networks

Why diving into More simple

fully connected networks?
Broadly available
 Remote attestation for securing
large embedded devices’ networks

Course Speaker
Computer and Network Security Alessandro Visintin
Date Email
21 October 2020 alevise.public@gmail.com