CoRA: A Scalable Collective Remote Attestation Protocol for Sensor Networks

Aída Diop, Maryline Laurent, Jean Leneutre, Jacques Traoré

2020

Abstract

Embedded Internet of Things (IoT) devices are deployed in the functioning of a number of applications such as industrial control, building automation, and the smart grid. The lack of robustness of IoT devices has however rendered such systems vulnerable to a number of remote cyber-attacks. Remote attestation is a security mechanism which enables to remotely verify the integrity of the software running on IoT devices. Similarly, collective remote attestation protocols are designed to efficiently verify the integrity of a group of devices. Existing collective attestation protocols do not provide an efficient and secure mechanism to detect compromised devices. In particular, it is not possible to efficiently trace the origin of an erroneous attestation response back to the concerned node. In this paper, we introduce CoRA, a highly scalable collective attestation protocol, which leverages the aggregating property of the underlying cryptographic scheme during the attestation process. CoRA is the first collective attestation protocol to also provide sequential detection, where the identity of the compromised node is revealed. We provide rigorous security proofs for our protocol and its underlying cryptographic primitive, and demonstrate its efficiency in highly scalable networks.

Paper Citation

in Harvard Style

Diop A., Laurent M., Leneutre J. and Traoré J. (2020). CoRA: A Scalable Collective Remote Attestation Protocol for Sensor Networks. In Proceedings of the 6th International Conference on Information Systems Security and Privacy - Volume 1: ICISSP, ISBN 978-989-758-399-5, pages 84-95. DOI: 10.5220/0008962700840095

in Bibtex Style

@conference{icissp20,
author={Aída Diop and Maryline Laurent and Jean Leneutre and Jacques Traoré},
title={CoRA: A Scalable Collective Remote Attestation Protocol for Sensor Networks},
booktitle={Proceedings of the 6th International Conference on Information Systems Security and Privacy - Volume 1: ICISSP,},
year={2020},
pages={84-95},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0008962700840095},
isbn={978-989-758-399-5},
}

in EndNote Style

TY - CONF

JO - Proceedings of the 6th International Conference on Information Systems Security and Privacy - Volume 1: ICISSP,
TI - CoRA: A Scalable Collective Remote Attestation Protocol for Sensor Networks
SN - 978-989-758-399-5
AU - Diop A.
AU - Laurent M.
AU - Leneutre J.
AU - Traoré J.
PY - 2020
SP - 84
EP - 95
DO - 10.5220/0008962700840095