ERASMUS：通过自测量的无人值守设置的有效远程证明
ERASMUS: Efficient Remote Attestation via Self- Measurement for Unattended Settings
摘要：
远程认证（RA）是检测嵌入式和物联网设备中恶意软件的常用方法。RA通常被实现为一个交互式协议，其中一个可信的一方-验证-措施的完整性，一个潜在的妥协的远程设备-证明。早期的工作集中在纯软件和完全基于硬件的技术上，这两种技术都不适合低端设备。最近的研究结果已经产生了混合（SW/HW）安全架构，包括一组最小的功能，以支持低端设备上的高效和安全的RA。所有现有的RA技术都需要按需操作，即，RA是实时的执行的。我们确定了一些缺点，这种一般的方法在无人值守的设备的上下文中：首先，它无法检测到移动恶意软件，进入和离开连续的RA实例之间的证明。其次，它要求证明者进行可能昂贵的（在时间和能量方面）计算，这对于关键或实时设备可能是有害的。为了解决这些缺点，我们引入了自我测量的概念，其中证明设备定期（和安全地）测量和记录自己的软件状态，根据预先建立的时间表。一个可能不可信的验证者偶尔会收集和验证这些度量。我们提出了一个具体的技术称为ERASMUS的设计：有效的远程认证通过自我测量无人值守设置，证明其功能和评估其性能。在这个过程中，我们还定义了一个新的度量标准--证明质量（QoA）。我们认为，伊拉斯谟是非常适合的时间敏感和/或安全关键型应用程序，按需RA服务不好。最后，我们证明了ERASMUS是处理多个设备认证的一个有前途的垫脚石（即，一群人或一群人），具有很高的机动性。
英文摘要：
Remote attestation (RA) is a popular means of detecting malware in embedded and IoT devices. RA is usually realized as an interactive protocol, whereby a trusted party -- verifier -- measures integrity of a potentially compromised remote device -- prover. Early work focused on purely software-based and fully hardware-based techniques, neither of which is ideal for low-end devices. More recent results have yielded hybrid (SW/HW) security architectures comprised of a minimal set of features to support efficient and secure RA on low-end devices. All prior RA techniques require on-demand operation, i.e, RA is performed in real time. We identify some drawbacks of this general approach in the context of unattended devices: First, it fails to detect mobile malware that enters and leaves the prover between successive RA instances. Second, it requires the prover to engage in a potentially expensive (in terms of time and energy) computation, which can be harmful for critical or real-time devices. To address these drawbacks, we introduce the concept of self-measurement where a prover device periodically (and securely) measures and records its own software state, based on a pre-established schedule. A possibly untrusted verifier occasionally collects and verifies these measurements. We present the design of a concrete technique called ERASMUS : Efficient Remote Attestation via Self-Measurement for Unattended Settings, justify its features and evaluate its performance. In the process, we also define a new metric -- Quality of Attestation (QoA). We argue that ERASMUS is well-suited for time-sensitive and/or safety-critical applications that are not served well by on-demand RA. Finally, we show that ERASMUS is a promising stepping stone towards handling attestation of multiple devices (i.e., a group or swarm) with high mobility.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
