85 citations · 105 across the 25 of their papers we have counts for
27 papers
Extending Layered Attestation into ARM Application Run-Times
Antonio Joia Neto, Bilel Sefsaf, Norrathep Rattanavipanon +5
Modern mobile and edge platforms provide hardware-backed attestation of application and platform integrity at load-time. However, they offer little support once application executi…
MOAT: Model-Agnostic Randomized Transformations for preventing Efficiency Degradation Attacks on ViTs
Anadi Goyal, Nandish Chattopadhyay, Chandan Karfa +2
To adopt the Vision Transformers (ViTs) in resource-constrained environment, token pruning is widely used to reduce computational cost without impacting accuracy. However, adversar…
SMARM+: Analyzing and Enhancing Shuffled Measurements for Remote Attestation in Real-Time IoT Settings
Amarin Laohajirapan, Norrathep Rattanavipanon
Remote attestation (RA) is a lightweight security primitive for detecting software compromise on IoT devices. Traditional RA schemes require atomic, non-interruptible memory measur…
Exploring CKKS Parameter Trade-offs for Privacy-Preserving Personalized Federated Learning
Kamolchanok Saengtong, Phanwadee Sinthong, Norrathep Rattanavipanon
Privacy-preserving Personalized Federated Learning (PFL) enables clients to collaboratively train personalized models without exposing raw data, but exchanged model updates remain…
Verifiable and Confidential DNN Inference on Low-End Edge Devices
Mohamed Khalil Kiri, Ivan De Oliveira Nunes, Aurélien Francillon +1
Deploying deep neural network (DNN) inference on low-end edge devices raises two key challenges: protecting model confidentiality against a potentially compromised edge system and…
FDM: A Framework for Decision-making to build ML-based Malware detection systems
Tadiwa Vhito, Jakapan Suaboot, Warodom Werapun +1
Selecting appropriate machine learning (ML) configurations for malware detection is a complex, multi-criteria problem. Model choice, feature engineering, and update mechanisms must…
Resolving Conflicts Between RTOS Timekeeping and Uninterruptable Trusted Computing
Antonio Joia Neto, Amarin Laohajirapan, Norrathep Rattanavipanon +1
Trusted Execution Environments (TEEs) on low-power microcontrollers (e.g., ARM TrustZone-M) enable isolation of Secure and Non-Secure software but still require both worlds to shar…
Exploring Cross-Client Memorization of Training Data in Large Language Models for Federated Learning
Tinnakit Udsa, Can Udomcharoenchaikit, Patomporn Payoungkhamdee +2
Federated learning (FL) enables collaborative training without raw data sharing, but still risks training data memorization. Existing FL memorization detection techniques focus on…
Provable Execution in Real-Time Embedded Systems
Antonio Joia Neto, Norrathep Rattanavipanon, Ivan De Oliveira Nunes
Embedded devices are increasingly ubiquitous and vital, often supporting safety-critical functions. However, due to strict cost and energy constraints, they are typically implement…
On the Verification of Control Flow Attestation Evidence
Adam Caulfield, Norrathep Rattanavipanon, Ivan De Oliveira Nunes
Remote run-time attestation methods, including Control Flow Attestation (CFA) and Data Flow Attestation (DFA), have been proposed to generate precise evidence of execution's contro…
TRACES: TEE-based Runtime Auditing for Commodity Embedded Systems
Adam Caulfield, Antonio Joia Neto, Norrathep Rattanavipanon +1
Control Flow Attestation (CFA) offers a means to detect control flow hijacking attacks on remote devices, enabling verification of their runtime trustworthiness. CFA generates a tr…
A Toolchain for Assisting Migration of Software Executables Towards Post-Quantum Cryptography
Norrathep Rattanavipanon, Jakapan Suaboot, Warodom Werapun
Quantum computing poses a significant global threat to today's security mechanisms. As a result, security experts and public sectors have issued guidelines to help organizations mi…
Poisoning Prevention in Federated Learning and Differential Privacy via Stateful Proofs of Execution
Norrathep Rattanavipanon, Ivan De Oliveira Nunes
The rise in IoT-driven distributed data analytics, coupled with increasing privacy concerns, has led to a demand for effective privacy-preserving and federated data collection/mode…
Towards Remotely Verifiable Software Integrity in Resource-Constrained IoT Devices
Ivan De Oliveira Nunes, Sashidhar Jakkamsetti, Norrathep Rattanavipanon +1
Lower-end IoT devices typically have strict cost constraints that rule out usual security mechanisms available in general-purpose computers or higher-end devices. To secure low-end…
PARseL: Towards a Verified Root-of-Trust over seL4
Ivan De Oliveira Nunes, Seoyeon Hwang, Sashidhar Jakkamsetti +2
Widespread adoption and growing popularity of embedded/IoT/CPS devices make them attractive attack targets. On low-to-mid-range devices, security features are typically few or none…
ACFA: Secure Runtime Auditing & Guaranteed Device Healing via Active Control Flow Attestation
Adam Caulfield, Norrathep Rattanavipanon, Ivan De Oliveira Nunes
Low-end embedded devices are increasingly used in various smart applications and spaces. They are implemented under strict cost and energy budgets, using microcontroller units (MCU…
On the feasibility of attacking Thai LPR systems with adversarial examples
Chissanupong Jiamsuchon, Jakapan Suaboot, Norrathep Rattanavipanon
Recent advances in deep neural networks (DNNs) have significantly enhanced the capabilities of optical character recognition (OCR) technology, enabling its adoption to a wide range…
QLB: A Privacy-preserving with Integrity-assuring Query Language for Blockchain
Nasrin Sohrabi, Norrathep Rattanavipanon, Zahir Tari
The increase in the adoption of blockchain technology in different application domains e.g., healthcare systems, supplychain management, has raised the demand for a data query mech…
ASAP: Reconciling Asynchronous Real-Time Operations and Proofs of Execution in Simple Embedded Systems
Adam Caulfield, Norrathep Rattanavipanon, Ivan De Oliveira Nunes
Embedded devices are increasingly ubiquitous and their importance is hard to overestimate. While they often support safety-critical functions (e.g., in medical devices and sensor-a…
Detecting Anomalous LAN Activities under Differential Privacy
Norrathep Rattanavipanon, Donlapark Ponnoprat, Hideya Ochiai +3
Anomaly detection has emerged as a popular technique for detecting malicious activities in local area networks (LANs). Various aspects of LAN anomaly detection have been widely stu…
On the TOCTOU Problem in Remote Attestation
Ivan De Oliveira Nunes, Sashidhar Jakkamsetti, Norrathep Rattanavipanon +1
We propose Remote Attestation with TOCTOU Avoidance (RATA): a provably secure approach to address the RA TOCTOU problem. With RATA, even malware that erases itself before execution…
Towards Automated Augmentation and Instrumentation of Legacy Cryptographic Executables: Extended Version
Karim Eldefrawy, Michael Locasto, Norrathep Rattanavipanon +1
Implementation flaws in cryptographic libraries, design flaws in underlying cryptographic primitives, and weaknesses in protocols using both, can all lead to exploitable vulnerabil…
A Verified Architecture for Proofs of Execution on Remote Devices under Full Software Compromise
Ivan De Oliveira Nunes, Karim Eldefrawy, Norrathep Rattanavipanon +1
Modern society is increasingly surrounded by, and accustomed to, a wide range of Cyber-Physical Systems (CPS), Internet-of-Things (IoT), and smart devices. They often perform safet…
Formally Verified Hardware/Software Co-Design for Remote Attestation
Ivan De Oliveira Nunes, Karim Eldefrawy, Norrathep Rattanavipanon +2
In this work, we take the first step towards formal verification of Remote Attestation (RA) by designing and verifying an architecture called VRASED: Verifiable Remote Attestation…