Towards Efficient Control-Flow Attestation with Software-Assisted Multi-level Execution Tracing | |
---|---|
Author | |
Abstract |
In the face of an increasing attack landscape, it is necessary to cater for efficient mechanisms to verify software and device integrity for detecting run-time modifications in next-generation systems-of-systems. In this context, remote attestation is a promising defense mechanism that allows a third party, the verifier, to ensure a remote device’s configuration integrity and behavioural execution correctness. However, most of the existing families of attestation solutions suffer from the lack of software-based mechanisms for the efficient extraction of rigid control-flow information. This limits their applicability to only those cyber-physical systems equipped with additional hardware support. This paper proposes a multi-level execution tracing framework capitalizing on recent software features, namely the extended Berkeley Packet Filter and Intel Processor Trace technologies, that can efficiently capture the entire platform configuration and control-flow stacks, thus, enabling wide attestation coverage capabilities that can be applied on both resource-constrained devices and cloud services. Our goal is to enhance run-time software integrity and trustworthiness with a scalable tracing solution eliminating the need for federated infrastructure trust. |
Year of Publication |
2021
|
Date Published |
sep
|
Publisher |
IEEE
|
Conference Location |
Athens, Greece
|
ISBN Number |
978-1-66544-505-4
|
URL |
https://ieeexplore.ieee.org/document/9647635/
|
DOI |
10.1109/MeditCom49071.2021.9647635
|
Google Scholar | BibTeX | DOI |