7 papers
Verifiable and Confidential DNN Inference on Low-End Edge Devices
Mohamed Khalil Kiri, Ivan De Oliveira Nunes, Aurélien Francillon +1
Deploying deep neural network (DNN) inference on low-end edge devices raises two key challenges: protecting model confidentiality against a potentially compromised edge system and…
Boosting Device Utilization in Control Flow Auditing
Alexandra Lengert, Adam Ilyas Caulfield, Ivan De Oliveira Nunes
Micro-Controller Units (MCUs) are widely used in safety-critical systems, making them attractive targets for attacks. This calls for lightweight defenses that remain effective desp…
Efficient Control Flow Attestation by Speculating on Control Flow Path Representations
Liam Tyler, Adam Caulfield, Ivan De Oliveira Nunes
Control Flow Attestation (CFA) allows remote verification of run-time software integrity in embedded systems. However, CFA is limited by the storage/transmission costs of generated…
Provable Execution in Real-Time Embedded Systems
Antonio Joia Neto, Norrathep Rattanavipanon, Ivan De Oliveira Nunes
Embedded devices are increasingly ubiquitous and vital, often supporting safety-critical functions. However, due to strict cost and energy constraints, they are typically implement…
TRACES: TEE-based Runtime Auditing for Commodity Embedded Systems
Adam Caulfield, Antonio Joia Neto, Norrathep Rattanavipanon +1
Control Flow Attestation (CFA) offers a means to detect control flow hijacking attacks on remote devices, enabling verification of their runtime trustworthiness. CFA generates a tr…
SpecCFA: Enhancing Control Flow Attestation/Auditing via Application-Aware Sub-Path Speculation
Adam Caulfield, Liam Tyler, Ivan De Oliveira Nunes
At the edge of modern cyber-physical systems, Micro-Controller Units (MCUs) are responsible for safety-critical sensing/actuation. However, MCU cost constraints rule out the usual…
Towards Browser Controls to Protect Cookies from Malicious Extensions
Liam Tyler, Ivan De Oliveira Nunes
Cookies maintain state across related web traffic. As such, cookies are commonly used for authentication by storing a user's session ID and replacing the need to re-enter credentia…