HolA: Holistic and Autonomous Attestation for IoT Networks

Visintin, Alessandro; Toffalini, Flavio; Losiouk, Eleonora; Conti, Mauro; Zhou, Jianying

doi:10.1007/978-3-031-16815-4_16

Cited by 2 publications

(1 citation statement)

References 38 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…It adopts a distributed approach to incrementally establish a common view of device integrity. HolA [42] extends the concept of CRA to broader topologies (other than mesh networks), where devices are distributed in a much wider environment, which can be seen as an internet-like IoT network. The protocol provides resistance against attacks targeting both network infrastructure and nodes themselves.…”

Section: Computational Costmentioning

confidence: 99%

From Interaction to Independence: zkSNARKs for Transparent and Non-Interactive Remote Attestation

Ebrahimi,

Hassanizadeh

2024

Proceedings 2024 Network and Distributed System Security Symposium

View full text Add to dashboard Cite

Remote attestation (RA) protocols have been widely used to evaluate the integrity of software on remote devices. Currently, the state-of-the-art RA protocols lack a crucial feature: transparency. This means that the details of the final attestation verification are not openly accessible or verifiable by the public. Furthermore, the interactivity of these protocols often limits attestation to trusted parties who possess privileged access to confidential device data, such as pre-shared keys and initial measurements. These constraints impede the widespread adoption of these protocols in various applications.In this paper, we introduce zRA, a non-interactive, transparent, and publicly provable RA protocol based on zkSNARKs. zRA enables verification of device attestations without the need for pre-shared keys or access to confidential data, ensuring a trustless and open attestation process. This eliminates the reliance on online services or secure storage on the verifier side. Moreover, zRA does not impose any additional security assumptions beyond the fundamental cryptographic schemes and the essential trust anchor components on the prover side (i.e., ROM and MPU). The zero-knowledge attestation proofs generated by devices have constant size regardless of the network complexity and number of attestations. Moreover, these proofs do not reveal sensitive information regarding internal states of the device, allowing verification by anyone in a public and auditable manner. We conduct an extensive security analysis and demonstrate scalability of zRA compared to prior work. Our analysis suggests that zRA excels especially in peer-to-peer and Pub/Sub network structures. To validate the practicality, we implement an open-source prototype of zRA using the Circom language. We show that zRA can be securely deployed on public permissionless blockchains, serving as an archival platform for attestation data to achieve resilience against DoS attacks.

show abstract

Section: Computational Costmentioning

confidence: 99%