6 papers · 1 filter
Boosting Device Utilization in Control Flow Auditing
Alexandra Lengert, Adam Ilyas Caulfield, Ivan De Oliveira Nunes
Micro-Controller Units (MCUs) are widely used in safety-critical systems, making them attractive targets for attacks. This calls for lightweight defenses that remain effective desp…
Efficient Control Flow Attestation by Speculating on Control Flow Path Representations
Liam Tyler, Adam Caulfield, Ivan De Oliveira Nunes
Control Flow Attestation (CFA) allows remote verification of run-time software integrity in embedded systems. However, CFA is limited by the storage/transmission costs of generated…
On the Verification of Control Flow Attestation Evidence
Adam Caulfield, Norrathep Rattanavipanon, Ivan De Oliveira Nunes
Remote run-time attestation methods, including Control Flow Attestation (CFA) and Data Flow Attestation (DFA), have been proposed to generate precise evidence of execution's contro…
TRACES: TEE-based Runtime Auditing for Commodity Embedded Systems
Adam Caulfield, Antonio Joia Neto, Norrathep Rattanavipanon +1
Control Flow Attestation (CFA) offers a means to detect control flow hijacking attacks on remote devices, enabling verification of their runtime trustworthiness. CFA generates a tr…
SpecCFA: Enhancing Control Flow Attestation/Auditing via Application-Aware Sub-Path Speculation
Adam Caulfield, Liam Tyler, Ivan De Oliveira Nunes
At the edge of modern cyber-physical systems, Micro-Controller Units (MCUs) are responsible for safety-critical sensing/actuation. However, MCU cost constraints rule out the usual…
SoK: Runtime Integrity
Mahmoud Ammar, Adam Caulfield, Ivan De Oliveira Nunes
This paper provides a systematic exploration of Control Flow Integrity (CFI) and Control Flow Attestation (CFA) mechanisms, examining their differences and relationships. It addres…