SARA: Sandwiched attestation through remote agents for cluster-based wireless sensor networks

Abstract

Cluster-based wireless sensor networks have advantages of scalability and efficient communication. However, a major security risk to cluster heads is a malicious code injection attack through which an adversary can completely control a cluster network to deliver fake data and obtain private data. Memory attestation scheme is an effective mechanism for attesting the firmware integrity of an embedded device. Unfortunately, existing hardware-based remote attestation scheme relying on a trusted platform module incurs a considerable storage overhead to cluster heads. Therefore, this article proposes a lightweight hardware-based remote attestation scheme that comprises two remote attestation protocols. A lightweight hardware security module without executing any complicated cryptographic computation is employed and can substantially reduce the development cost and energy consumption compared with the trusted platform module. In the proposed scheme, a base station can attest each individual cluster head while all cluster nodes can simultaneously attest their cluster head in regular intervals. Performance analysis indicates that the storage requirement for cluster heads is independent of the number of attestation sessions. Furthermore, the computational cost of cluster nodes for the proposed scheme is comparable to that of the trusted platform module-based scheme. The proposed scheme is particularly suitable for long-term applications based on lightweight cluster heads.

CRAFT: A Continuous Remote Attestation Framework for IoT

“…Others enable the final attestation report to be fetched by any prover [8]. Some work has also exclusively focused on the internal attestation mechanism of a single device so it can be attested in the most trusted way [9]. Therefore, existing remote attestation protocols can be classified in the following categories: Software attestation, Hardware attestation and Software-Hardware, also called Hybrid attestation.…”

“…SARA (in 2017) [9] uses TPM-enforced devices as cluster heads to isolate and secure parts of the network. Devices in the cluster and cluster head validate each other, and cluster heads are also validated by the main verifier in order to provide attestation at the network level.…”