Cumulative Attestation Kernels for Embedded Systems

1 There are increasing deployments of networked embedded systems and rising threats of malware intrusions on such systems. To mitigate this threat, it is desirable to enable commonly-used embedded processors known as flash MCUs to provide remote attestation assurances like the Trusted Platform Module (TPM) provides for PCs. However, flash MCUs have special limitations concerning cost, power efficiency, computation, and memory that influence how this goal can be achieved. Moreover, many types of applications require integrity guarantees for the system over an interval of time rather than just at a given instant. The aim of this paper is to demonstrate how an architecture we call a Cumulative Attestation Kernel (CAK) can address these concerns by providing cryptographically secure firmware auditing on networked embedded systems. To illustrate the value of CAKs, we demonstrate practical remote attestation for Advanced Metering Infrastructure (AMI), a core technology in emerging smart powe...

• Type: Conference
• Year: 2009
• Where: ESORICS
• Authors: Michael LeMay, Carl A. Gunter
• Keywords: Cumulative Attestation Kernel, ESORICS 2009, Practical Remote Attestation, Remote Attestation Assurances, Security Privacy