6 citations · 13 across the 8 of their papers we have counts for
7 papers · 1 filter
Privacy-from-Birth: Protecting Sensed Data from Malicious Sensors with VERSA
Ivan De Oliveira Nunes, Seoyeon Hwang, Sashidhar Jakkamsetti +1
There are many well-known techniques to secure sensed data in IoT/CPS systems, e.g., by authenticating communication end-points, encrypting data before transmission, and obfuscatin…
GAROTA: Generalized Active Root-Of-Trust Architecture
Esmerald Aliaj, Ivan De Oliveira Nunes, Gene Tsudik
In this paper, we set out to systematically design a minimal active RoT for tiny low-end MCU-s. We begin with the following questions: (1) What functions and hardware support are r…
Tiny-CFA: A Minimalistic Approach for Control-Flow Attestation Using Verified Proofs of Execution
Ivan De Oliveira Nunes, Sashidhar Jakkamsetti, Gene Tsudik
The design of tiny trust anchors has received significant attention over the past decade, to secure low-end MCU-s that cannot afford expensive security mechanisms. In particular, h…
On the Root of Trust Identification Problem
Ivan De Oliveira Nunes, Xuhua Ding, Gene Tsudik
Root of Trust Identification (RTI) refers to determining whether a given security service or task is being performed by the particular root of trust (e.g., a TEE) within a specific…
On the TOCTOU Problem in Remote Attestation
Ivan De Oliveira Nunes, Sashidhar Jakkamsetti, Norrathep Rattanavipanon +1
We propose Remote Attestation with TOCTOU Avoidance (RATA): a provably secure approach to address the RA TOCTOU problem. With RATA, even malware that erases itself before execution…
A Verified Architecture for Proofs of Execution on Remote Devices under Full Software Compromise
Ivan De Oliveira Nunes, Karim Eldefrawy, Norrathep Rattanavipanon +1
Modern society is increasingly surrounded by, and accustomed to, a wide range of Cyber-Physical Systems (CPS), Internet-of-Things (IoT), and smart devices. They often perform safet…
Formally Verified Hardware/Software Co-Design for Remote Attestation
Ivan De Oliveira Nunes, Karim Eldefrawy, Norrathep Rattanavipanon +2
In this work, we take the first step towards formal verification of Remote Attestation (RA) by designing and verifying an architecture called VRASED: Verifiable Remote Attestation…