CRAFT: A Continuous Remote Attestation Framework for IoT

Conchon, Emmanuel; Sauveron, Damien

doi:10.1109/access.2021.3067697

Cited by 7 publications

(6 citation statements)

References 21 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Therefore, a run-time attestation schema is more recommended. Aligned with this, Moreau et al [49] proposed a continuous remote attestation framework for IoT (CRAFT) which is aimed to be a general solution to IoT attestation that supports different attestation protocols. The conducted performance evaluation showed little or no overhead.…”

Section: Comparison Of Iotattest With Other Frameworkmentioning

confidence: 99%

A Security Framework for Increasing Data and Device Integrity in Internet of Things Systems

Dirin,

Oliver,

Laine

2023

Sensors

View full text Add to dashboard Cite

The trustworthiness of a system is not just about proving the identity or integrity of the hardware but also extends to the data, control, and management planes of communication between devices and the software they are running. This trust in data and device integrity is desirable for Internet of Things (IoT) systems, especially in critical environments. In this study, we developed a security framework, IoTAttest, for building IoT systems that leverage the Trusted Platform Module 2.0 and remote attestation technologies to enable the establishment of IoT devices’ collected data and control plan traffic integrity. After presenting the features and reference architecture of IoTAttest, we evaluated the privacy preservation and validity through the implementation of two proof-of-concept IoT applications that were designed by two teams of university students based on the reference architecture. After the development, the developers answered open questions regarding their experience and perceptions of the framework’s usability, limitations, scalability, extensibility, potential, and security. The results indicate that IoTAttest can be used to develop IoT systems with effective attestation to achieve device and data integrity. The proof-of-concept solutions’ outcomes illustrate the functionalities and performance of the IoT framework. The feedback from the proof-of-concept developers affirms that they perceived the framework as usable, scalable, extensible, and secure.

show abstract

Section: Comparison Of Iotattest With Other Frameworkmentioning

confidence: 99%

A Security Framework for Increasing Data and Device Integrity in Internet of Things Systems

Dirin,

Oliver,

Laine

2023

Sensors

View full text Add to dashboard Cite

show abstract

“…It separates untrusted application software from a so-called trusted computing module. CRAFT (2021) [4] is the first continuous remote attestation framework for the IoT. It provides all the basic functionalities needed to implement continuous remote attestation in real-world IoT networks.…”

Section: Related Workmentioning

confidence: 99%

“…The CRAFT [4] framework enables continuous remote attestation for IoT networks and agnostically supports any attestation protocol.…”

Section: An Overview Of Craft New Features: Craft-asmpmentioning

confidence: 99%

“…A general overview of CRAFT is provided in Figure 2. In the following paragraphs, the main ideas of the CRAFT [4] framework are presented to aid understanding. In a nutshell, CRAFT has two phases: the offline phase and the online phase.…”

Section: Craft Basismentioning

confidence: 99%

“…To further improve remote attestation flexibility and security, there are also remote attestation frameworks, such as CRAFT [4], which improve existing protocols by adapting to any deployment context, and, thus, are more flexible and secure than standalone remote attestation protocols.…”

Section: Introductionmentioning

confidence: 99%

See 2 more Smart Citations

An Adaptive Simultaneous Multi-Protocol Extension of CRAFT

Conchon

Sauveron

2023

Sensors

Self Cite

View full text Add to dashboard Cite

An exponential number of devices connect to Internet of Things (IoT) networks every year, increasing the available targets for attackers. Protecting such networks and devices against cyberattacks is still a major concern. A proposed solution to increase trust in IoT devices and networks is remote attestation. Remote attestation establishes two categories of devices, verifiers and provers. Provers must send an attestation to verifiers when requested or at regular intervals to maintain trust by proving their integrity. Remote attestation solutions exist within three categories: software, hardware and hybrid attestation. However, these solutions usually have limited use-cases. For instance, hardware mechanisms should be used but cannot be used alone, and software protocols are usually efficient in particular contexts, such as small networks or mobile networks. More recently, frameworks such as CRAFT have been proposed. Such frameworks enable the use of any attestation protocol within any network. However, as these frameworks are still recent, there is still considerable room for improvement. In this paper, we improve CRAFT’s flexibility and security by proposing ASMP (adaptative simultaneous multi-protocol) features. These features fully enable the use of multiple remote attestation protocols for any devices. They also enable devices to seamlessly switch protocols at any time depending on factors such as the environment, context, and neighboring devices. A comprehensive evaluation of these features in a real-world scenario and use-cases demonstrates that they improve CRAFT’s flexibility and security with minimal impact on performance.

show abstract