Has My IoT Device Been Hacked? Establishing Trust w/ Remote Attestation

on YouTube ↗40m

" summary

Clear comparison of how Remote Attestation is applied to real IoT problems: a taxonomy of hybrid attestation with ARM TrustZone for minimal hardware anchors, spanning-tree aggregation for scalable swarm checks (CEDA-style), and C-FLAT (2016) control‑flow attestation to catch runtime code‑reuse attacks. Covers implemented ideas (distributed attestation to reason about device-to-device trust), concrete open problems (privacy via zero‑knowledge proofs, energy‑harvesting devices that wake milliseconds, interruptible attestation for real‑time systems) and a proposed use of Lamport/vector clocks for asynchronous verification.

AI-written summary · about

" chapters (7)

1. 0:00Intro
2. 1:37Agenda
3. 2:27IoT security
4. 12:08Remote attestation protocols
5. 32:27Open challenges
6. 39:00Conclusions
7. 39:54Outro

" related talks

• 29mRemote Attestation of IoT devices using a discrete TPM 2.0Dimitar Tomov, Svetlozar Kalchev · Linux Plumbers Conference 2022
• 25mEstablishing Trusted and Secure Foundation for Device Management Using Open Source SoftwareTushar Khandelwal · Open Source Summit Europe 2023
• 25mDemystifying remote attestationAndras Slemmer, Gaëtan Wattiau · OC3 2023
• 19mBoF: Simple Remote Attestation with Secure & Attested Communication ChannelsRoberto Sassu · Linux Security Summit Europe 2019
• 39mApplied IoT security for healthcare and industrialPaul Lockley · IoTSF Conference 2017
• 29mA Simple Protocol for Remote Attestation of System IntegrityRoberto Sassu · Linux Security Summit Europe 2018
• 57mSecuring the last mile of IoT solutionsAnders Lybecker · NDC Oslo 2018
• 12mTrustless IoT: A Logic-Driven Architecture for IoT HubsEmin Gün Sirer, Soumya Basu · 3rd USENIX Workshop on Hot Topics in Edge Computing (HotEdge '20)