Publication
Remote Attestation for IoT services
| Summary: | The exposure the Internet is constantly putting its users under grows everyday. From sketchy links received via messages, emails or other ways, the possibilities of device compromisation is immense. The issue is that, nowadays, all information is being moved to online servers to allow easier access, forcing users to expose their private information to any possible attacker of the server theyregistered their data in to. An upcoming technology is Internet of Things (IoT) systems, who focus on, amongst other features, provide information to the user via the Internet. Most time, this information is sent remotely and the communication between IoT systems must be secure from any outside attacker. As such, IoT security is becoming more and more of a daily concern, not only for software implementation, but for a regular IoT system user as well. One way to ensure the IoT system has not been attacked or compromised is by performingRemote Attestation (RA), which is a system verification, where the untrusted system gathers information about itself and sends it to a trusted entity responsible for performing the necessary operations to ensure the untrusted device has not been compromised (Verifier), by comparing the data gathered against defined standards. ARCADIAN-IoT is a framework under development that aims aims to provide, among other features, novel remote attestation schemes exploring Hardware-based roots of trust for IoT devices. As such, the work carried out in this project aims to implement several features associated to the Verifier role. Those features include enforcing policies to ensure the untrusted device’scharacteristics are within standards, receiving and saving the standard values for each type of device and each Service Provider (responsible for establishing those standards) in a database. Lastly, a test to the performance of the features implemented is presented, which indicates the execution time required to perform the comparison between Claims and Reference Values. |
|---|---|
| Main Authors: | Brás, Joana Almeida |
| Subject: | Remote Attestation Service Attestation Arcadian-IoT Internet of Things Verifier Attestação Remota Atestação de serviços ARCADIAN-IoT Internet das Coisas Verificador |
| Year: | 2024 |
| Country: | Portugal |
| Document type: | master thesis |
| Access type: | open access |
| Associated institution: | Universidade de Coimbra |
| Language: | English |
| Origin: | Estudo Geral - Universidade de Coimbra |
| Summary: | The exposure the Internet is constantly putting its users under grows everyday. From sketchy links received via messages, emails or other ways, the possibilities of device compromisation is immense. The issue is that, nowadays, all information is being moved to online servers to allow easier access, forcing users to expose their private information to any possible attacker of the server theyregistered their data in to. An upcoming technology is Internet of Things (IoT) systems, who focus on, amongst other features, provide information to the user via the Internet. Most time, this information is sent remotely and the communication between IoT systems must be secure from any outside attacker. As such, IoT security is becoming more and more of a daily concern, not only for software implementation, but for a regular IoT system user as well. One way to ensure the IoT system has not been attacked or compromised is by performingRemote Attestation (RA), which is a system verification, where the untrusted system gathers information about itself and sends it to a trusted entity responsible for performing the necessary operations to ensure the untrusted device has not been compromised (Verifier), by comparing the data gathered against defined standards. ARCADIAN-IoT is a framework under development that aims aims to provide, among other features, novel remote attestation schemes exploring Hardware-based roots of trust for IoT devices. As such, the work carried out in this project aims to implement several features associated to the Verifier role. Those features include enforcing policies to ensure the untrusted device’scharacteristics are within standards, receiving and saving the standard values for each type of device and each Service Provider (responsible for establishing those standards) in a database. Lastly, a test to the performance of the features implemented is presented, which indicates the execution time required to perform the comparison between Claims and Reference Values. |
|---|
Funded activities
No funded projects found.