1 of 1

Abstract:

A cyber attack detection framework for highly dynamic IoT Swarms.
Check the software integrity of the IoT device i.e., whether the device is compromised or not.
Check the secure data communication between the devices i.e., data exchange is legitimate or not.
A solution in form of protocol that verifies both that device trustworthiness as well as the legitimate operations.
Demonstration of a real-time applications like a smart office scenarios to demonstrate and illustrate its functionality.

Introduction:

Today, large number of smart interconnected devices provide safety and security of critical services and other desirable services for energy grids, industrial control systems, home/office automation, transportation, and other critical infrastructure. These devices often operate in swarms. To ensure their correct operation, it is crucial to maintain their software integrity and protect them against attacks.

Therefore, Distributed attestation has emerged as a valuable security mechanism which aims to verify remotely, a potentially untrusted device has been compromised or not.

The Common scenario of Distributed attestation is that the entities (devices) to be attested, called prover, sends a status report of its current software configuration and some other essential information to another trusted party, called verifier. Afterwards, verifier checks the information, and establishes whether a prover is compromised or not.

Remote Attestation Demonstration Setup:

The developed remote attestation protocol set up showcased at our Lab(Bharti Building, IITD).

The initial set up is composed of 5 devices and is as follows –

Security Camera: To recognize the face in respect of known and unknown entity.

Brightness Sensor: To capture the brightness status of the environment.

Smart Bulb: For lighting the environment based on the value of Brightness Sensor.

Broker: Responsible for communication of all devices.

Verifier: Responsible for checking the current status(Device is compromised by an attacker or not) of the devices.

References:

[1] SEDA: Scalable Embedded Device Attestation. CCS '15: Proceedings of the 22nd ACM SIGSAC Conference on Computer and Communications Security Pages 964–975 Available:https://doi.org/10.1145/2810103.2813670

[2] SANA: Secure and Scalable Aggregate Network Attestation. CCS '16: Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security Pages 731–742

Available: https://doi.org/10.1145/2976749.2978335

Acknowledgement:

This work is a part of a Ministry of electronics and Information Technology (MeitY) funded project, Building End to End 5G Test Bed.

Conclusion:

Proposed remote attestation protocol is able to perform attestation of IoT devices seamlessly.
The main important aspect of our attestation protocol is that it performs attestation of asynchronous communication in IoT systems.
In future we will evaluate the performance with large area network.
We will also look at the possible lightweight crypto algorithm to reduce the resource overhead.

Bharti School of Telecommunication Technology & Management

Industrial Significance

Ready to deploy in any industry or other respective area to check the security vulnerabilities of the IoT devices deployed in wide area.

Technology Readiness Level:

Work in progress

Remote Attestation of IoT Swarm

Debanka Giri, Subidh Ali*, Brejesh Lall*

Figure 1: Basic Remote Attestation Protocol.

Figure 2: Remote Attestation Protocol PUB-SUB Model.

Result:

We have tested our protocol more than 50(fifty) heterogeneous devices, like Raspberry Pi, Jetson Nano and different SOC Boards.
The proposed protocol is appropriate for numerous dynamic and critical scenarios like in office, home, mall, hospital, stadium, school, college, industrial plant, factory and many more.
Our protocol can be is low latency in nature.

Communication Technologies

Figure 3: POC of developed protocol showcased at our Lab in Bharti Building(IIT Delhi).