MTRA: Multi-Tier randomized remote attestation in IoT networks. Issue 81 (March 2019)

• Record Type: Journal Article
• Authors: Tan, Hailun; Tsudik, Gene; Jha, Sanjay
• Is Part Of: Computers & security. Issue 81(2019)
• Page Start: 78
• Page End: 93
• Publication Date: 2019-03
• Subjects: Remote attestation -- Internet of Things -- Network security -- Embedded systems -- Network attack; Computer security -- Periodicals; Electronic data processing departments -- Security measures -- Periodicals; 005.805
• DOI: 10.1016/j.cose.2018.10.008
• Languages: English
• ISSNs: 0167-4048

Abstract

Abstract: Large numbers of Internet of Things (IoT) devices are increasingly deployed in many aspects of modern life. Given their limited resources and computational power, verifying program integrity in such devices is a challenging issue. In this paper, we design MTRA, a Multiple-Tier Remote Attestation protocol, by exploiting differences in resources and computational power among various types of networked IoT devices. More powerful devices equipped with a Trusted Platform Module (TPM) are verified through trusted hardware while others are verified through software-based attestation. In addition, a randomized memory region for attestation is used in MTRA to increase the entropy of the attestation responses. MTRA is a flexible means of program integrity verification for heterogeneous IoT devices.