ASSURED: Architecture for Secure Software Update of Realistic Embedded Devices

N. Asokan; Thomas Nyman; Norrathep Rattanavipanon; Ahmad-Reza Sadeghi; Gene Tsudik

doi:10.1109/TCAD.2018.2858422

ASSURED: Architecture for Secure Software Update of Realistic Embedded Devices

N. Asokan, Thomas Nyman, Norrathep Rattanavipanon, Ahmad-Reza Sadeghi, Gene Tsudik

Research output: Contribution to journal › Article › Scientific › peer-review

44 Citations (Scopus)

306 Downloads (Pure)

Abstract

Secure firmware update is an important stage in the IoT device life-cycle. Prior techniques, designed for other computational settings, are not readily suitable for IoT devices, since they do not consider idiosyncrasies of a realistic large-scale IoT deployment. This motivates our design of ASSURED, a secure and scalable update framework for IoT. ASSURED includes all stakeholders in a typical IoT update ecosystem, while providing end-to-end security between manufacturers and devices. To demonstrate its feasibility and practicality, ASSURED is instantiated and experimentally evaluated on two commodity hardware platforms. Results show that ASSURED is considerably faster than current update mechanisms in realistic settings.

Original language	English
Article number	8493602
Pages (from-to)	2290-2300
Number of pages	10
Journal	IEEE TRANSACTIONS ON COMPUTER-AIDED DESIGN OF INTEGRATED CIRCUITS AND SYSTEMS
Volume	37
Issue number	11
DOIs	https://doi.org/10.1109/TCAD.2018.2858422
Publication status	Published - Nov 2018
MoE publication type	A1 Journal article-refereed
Event	International Conference on Embedded Software - Turin, Italy Duration: 30 Sep 2018 → 5 Oct 2018

Keywords

Computer security
embedded systems
embedded software
Internet of Things (IoT)

Access to Document

10.1109/TCAD.2018.2858422

ASSURED Accepted author manuscriptAccepted author manuscript, 909 KBLicence: Unspecified

https://arxiv.org/abs/1807.05002Licence: Other

OpenUrl availability

Full text

Cite this

@article{a53daf890b1a46fab6ab80aa34a3d87a,

title = "ASSURED: Architecture for Secure Software Update of Realistic Embedded Devices",

abstract = "Secure firmware update is an important stage in the IoT device life-cycle. Prior techniques, designed for other computational settings, are not readily suitable for IoT devices, since they do not consider idiosyncrasies of a realistic large-scale IoT deployment. This motivates our design of ASSURED, a secure and scalable update framework for IoT. ASSURED includes all stakeholders in a typical IoT update ecosystem, while providing end-to-end security between manufacturers and devices. To demonstrate its feasibility and practicality, ASSURED is instantiated and experimentally evaluated on two commodity hardware platforms. Results show that ASSURED is considerably faster than current update mechanisms in realistic settings.",

keywords = "Computer security, embedded systems, embedded software, Internet of Things (IoT)",

author = "N. Asokan and Thomas Nyman and Norrathep Rattanavipanon and Ahmad-Reza Sadeghi and Gene Tsudik",

year = "2018",

month = nov,

doi = "10.1109/TCAD.2018.2858422",

language = "English",

volume = "37",

pages = "2290--2300",

journal = "IEEE TRANSACTIONS ON COMPUTER-AIDED DESIGN OF INTEGRATED CIRCUITS AND SYSTEMS",

issn = "0278-0070",

publisher = "IEEE",

number = "11",

note = "International Conference on Embedded Software, EMSOFT ; Conference date: 30-09-2018 Through 05-10-2018",

}

TY - JOUR

T1 - ASSURED

T2 - International Conference on Embedded Software

AU - Asokan, N.

AU - Nyman, Thomas

AU - Rattanavipanon, Norrathep

AU - Sadeghi, Ahmad-Reza

AU - Tsudik, Gene

PY - 2018/11

Y1 - 2018/11

N2 - Secure firmware update is an important stage in the IoT device life-cycle. Prior techniques, designed for other computational settings, are not readily suitable for IoT devices, since they do not consider idiosyncrasies of a realistic large-scale IoT deployment. This motivates our design of ASSURED, a secure and scalable update framework for IoT. ASSURED includes all stakeholders in a typical IoT update ecosystem, while providing end-to-end security between manufacturers and devices. To demonstrate its feasibility and practicality, ASSURED is instantiated and experimentally evaluated on two commodity hardware platforms. Results show that ASSURED is considerably faster than current update mechanisms in realistic settings.

AB - Secure firmware update is an important stage in the IoT device life-cycle. Prior techniques, designed for other computational settings, are not readily suitable for IoT devices, since they do not consider idiosyncrasies of a realistic large-scale IoT deployment. This motivates our design of ASSURED, a secure and scalable update framework for IoT. ASSURED includes all stakeholders in a typical IoT update ecosystem, while providing end-to-end security between manufacturers and devices. To demonstrate its feasibility and practicality, ASSURED is instantiated and experimentally evaluated on two commodity hardware platforms. Results show that ASSURED is considerably faster than current update mechanisms in realistic settings.

KW - Computer security

KW - embedded systems

KW - embedded software

KW - Internet of Things (IoT)

U2 - 10.1109/TCAD.2018.2858422

DO - 10.1109/TCAD.2018.2858422

M3 - Article

VL - 37

SP - 2290

EP - 2300

JO - IEEE TRANSACTIONS ON COMPUTER-AIDED DESIGN OF INTEGRATED CIRCUITS AND SYSTEMS

JF - IEEE TRANSACTIONS ON COMPUTER-AIDED DESIGN OF INTEGRATED CIRCUITS AND SYSTEMS

SN - 0278-0070

IS - 11

M1 - 8493602

Y2 - 30 September 2018 through 5 October 2018

ER -

ASSURED: Architecture for Secure Software Update of Realistic Embedded Devices

Abstract

Keywords

Access to Document

OpenUrl availability

Fingerprint

Cite this