Remote attestation is a two-party security protocol that aims to detect the presence of malware in a remote untrusted IoT device. In order to perform the attestation, an IoT device typically has to stop the regular operation and perform expensive computations that will consume the battery life of the device. In this paper, we use cloud/fog computing to attest an IoT device in an efficient way. We propose Remote Attestation as a Service (RAaS) which allows even a low-end IoT device to securely offload the attestation process to the cloud. We argue that RAaS allows the clone of the device, securely created in the cloud, to perform the most expensive attestation computations. Our proposed approach could reduce the number of attestation operations running on the real IoT device, saving energy consumption, and reducing the downtime of the usual operation of an IoT device during the execution of remote attestation.

Remote attestation as a service for IoT / Conti, M.; Dushku, E.; Mancini, L. V.; Rabbani, M. M.; Ranise, S.. - (2019), pp. 320-325. (Intervento presentato al convegno 6th International Conference on Internet of Things: Systems, Management and Security, IOTSMS 2019 tenutosi a Granada; Spain) [10.1109/IOTSMS48152.2019.8939224].

Remote attestation as a service for IoT

Dushku E.
Secondo
Membro del Collaboration Group
;
Mancini L. V.
Supervision
;
2019

Abstract

Remote attestation is a two-party security protocol that aims to detect the presence of malware in a remote untrusted IoT device. In order to perform the attestation, an IoT device typically has to stop the regular operation and perform expensive computations that will consume the battery life of the device. In this paper, we use cloud/fog computing to attest an IoT device in an efficient way. We propose Remote Attestation as a Service (RAaS) which allows even a low-end IoT device to securely offload the attestation process to the cloud. We argue that RAaS allows the clone of the device, securely created in the cloud, to perform the most expensive attestation computations. Our proposed approach could reduce the number of attestation operations running on the real IoT device, saving energy consumption, and reducing the downtime of the usual operation of an IoT device during the execution of remote attestation.
2019
6th International Conference on Internet of Things: Systems, Management and Security, IOTSMS 2019
Internet of Things; remote attestation; security and privacy
04 Pubblicazione in atti di convegno::04b Atto di convegno in volume
Remote attestation as a service for IoT / Conti, M.; Dushku, E.; Mancini, L. V.; Rabbani, M. M.; Ranise, S.. - (2019), pp. 320-325. (Intervento presentato al convegno 6th International Conference on Internet of Things: Systems, Management and Security, IOTSMS 2019 tenutosi a Granada; Spain) [10.1109/IOTSMS48152.2019.8939224].
File allegati a questo prodotto
File Dimensione Formato  
Conti_Remote_2019.pdf

solo gestori archivio

Tipologia: Versione editoriale (versione pubblicata con il layout dell'editore)
Licenza: Tutti i diritti riservati (All rights reserved)
Dimensione 446.98 kB
Formato Adobe PDF
446.98 kB Adobe PDF   Contatta l'autore

I documenti in IRIS sono protetti da copyright e tutti i diritti sono riservati, salvo diversa indicazione.

Utilizza questo identificativo per citare o creare un link a questo documento: https://hdl.handle.net/11573/1386986
Citazioni
  • ???jsp.display-item.citation.pmc??? ND
  • Scopus 4
  • ???jsp.display-item.citation.isi??? 4
social impact