{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,18]],"date-time":"2026-08-18T15:00:47Z","timestamp":1787065247601,"version":"build-2736575974"},"reference-count":29,"publisher":"Association for Computing Machinery (ACM)","issue":"1","license":[{"start":{"date-parts":[[2018,12,21]],"date-time":"2018-12-21T00:00:00Z","timestamp":1545350400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["1702911"],"award-info":[{"award-number":["1702911"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]},{"name":"DHS","award":["under subcontract from HRL Laboratories"],"award-info":[{"award-number":["under subcontract from HRL Laboratories"]}]},{"name":"ARO","award":["W911NF-16-1-0536"],"award-info":[{"award-number":["W911NF-16-1-0536"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["ACM Trans. Des. Autom. Electron. Syst."],"published-print":{"date-parts":[[2019,1,31]]},"abstract":"<jats:p>\n                    Remote attestation (RA) is a popular means of detecting malware in embedded and IoT devices. RA is usually realized as an interactive protocol, whereby a trusted party (\n                    <jats:italic>verifier<\/jats:italic>\n                    ) measures software integrity of a potentially compromised remote device (\n                    <jats:italic>prover)<\/jats:italic>\n                    . Early work focused on purely software-based and fully hardware-based techniques, neither of which is ideal for low-end embedded devices. More recent results yielded hybrid (SW\/HW) architectures with a minimal set of features to support efficient and secure RA on low-end devices.\n                  <\/jats:p>\n                  <jats:p>\n                    All prior techniques require\n                    <jats:italic>on-demand operation<\/jats:italic>\n                    , i.e., RA is performed in\n                    <jats:italic>real time<\/jats:italic>\n                    . We identify some drawbacks of this general approach in the context of unattended devices: First, it fails to detect\n                    <jats:italic>mobile malware<\/jats:italic>\n                    that enters and leaves prover between successive RA instances. Second, it requires prover to engage in a potentially expensive (in terms of time and energy) computation, which can be harmful for mission-critical or real-time devices.\n                  <\/jats:p>\n                  <jats:p>\n                    To address these drawbacks, we introduce the concept of\n                    <jats:italic>self-measurement<\/jats:italic>\n                    , whereby prover periodically and securely measures and records its own software state, based on a pre-established schedule. A (possibly untrusted) verifier occasionally collects and verifies these measurements. We present the design of a concrete technique, called Efficient Remote Attestation via Self-Measurement for Unattended Settings, (ERASMUS), justify its features and evaluate its performance. In the process, we also define a new metric,\n                    <jats:italic>Quality of Attestation<\/jats:italic>\n                    (QoA). We believe that ERASMUS is well suited for time-sensitive and\/or safety-critical applications that are not served well by on-demand RA. Finally, we show that ERASMUS is a promising stepping stone toward handling attestation of multiple devices (i.e., a group or swarm) with high mobility.\n                  <\/jats:p>","DOI":"10.1145\/3279950","type":"journal-article","created":{"date-parts":[[2018,12,21]],"date-time":"2018-12-21T08:39:21Z","timestamp":1545381561000},"page":"1-15","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":5,"title":["Remote Attestation via Self-Measurement"],"prefix":"10.1145","volume":"24","author":[{"given":"Xavier","family":"Carpent","sequence":"first","affiliation":[{"name":"University of California, San Diego\u2020, La Jolla, CA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Norrathep","family":"Rattanavipanon","sequence":"additional","affiliation":[{"name":"University of California, Irvine, Donald Bren Hall, Irvine CA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Gene","family":"Tsudik","sequence":"additional","affiliation":[{"name":"University of California, Irvine, Donald Bren Hall, Irvine CA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2018,12,21]]},"reference":[{"key":"e_1_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1145\/2897937.2905020"},{"key":"e_1_2_1_2_1","volume-title":"USENIX Security Symposium.","author":"Antonakakis M.","unstructured":"M. Antonakakis , T. April , M. Bailey , M. Bernhard , E. Bursztein , J. Cochran , Z. Durumeric , J. A. Halderman , L. Invernizzi , M. Kallitsis , Understanding the mirai botnet . In USENIX Security Symposium. M. Antonakakis, T. April, M. Bailey, M. Bernhard, E. Bursztein, J. Cochran, Z. Durumeric, J. A. Halderman, L. Invernizzi, M. Kallitsis, et al. Understanding the mirai botnet. In USENIX Security Symposium."},{"key":"e_1_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813670"},{"key":"e_1_2_1_4_1","unstructured":"Boundary Devices. 2018. i.MX6 ARM Development Board. Retrieved from https:\/\/boundarydevices.com\/product\/sabre-lite-imx6-sbc\/.  Boundary Devices. 2018. i.MX6 ARM Development Board. Retrieved from https:\/\/boundarydevices.com\/product\/sabre-lite-imx6-sbc\/."},{"key":"e_1_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1145\/2744769.2744922"},{"key":"e_1_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1145\/2897937.2898083"},{"key":"e_1_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1145\/3052973.3053010"},{"key":"e_1_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.23919\/DATE.2018.8342195"},{"key":"e_1_2_1_10_1","volume-title":"Proceedings of the Network and Distributed System Security Symposium (NDSS\u201912)","author":"Eldefrawy Karim","year":"2012","unstructured":"Karim Eldefrawy , Gene Tsudik , Aur\u00e9lien Francillon , and Daniele Perito . 2012 . SMART: Secure and minimal architecture for (establishing dynamic) root of trust . In Proceedings of the Network and Distributed System Security Symposium (NDSS\u201912) . Karim Eldefrawy, Gene Tsudik, Aur\u00e9lien Francillon, and Daniele Perito. 2012. SMART: Secure and minimal architecture for (establishing dynamic) root of trust. In Proceedings of the Network and Distributed System Security Symposium (NDSS\u201912)."},{"key":"e_1_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1145\/3098243.3098261"},{"key":"e_1_2_1_12_1","unstructured":"Olivier Girard. 2009. OpenMSP430. Retrieved from https:\/\/opencores.org\/project\/openmsp430.  Olivier Girard. 2009. OpenMSP430. Retrieved from https:\/\/opencores.org\/project\/openmsp430."},{"key":"e_1_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1145\/2939918.2939938"},{"key":"e_1_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1145\/1629575.1629596"},{"key":"e_1_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1145\/2592798.2592824"},{"key":"e_1_2_1_16_1","volume-title":"Introduction to Modern Cryptography","author":"Lindell Yehuda","unstructured":"Yehuda Lindell and Jonathan Katz . 2014. Introduction to Modern Cryptography . Chapman 8 Hall\/CRC, London, 68--72. Yehuda Lindell and Jonathan Katz. 2014. Introduction to Modern Cryptography. Chapman 8 Hall\/CRC, London, 68--72."},{"key":"e_1_2_1_17_1","unstructured":"National ICT Australia and other contributors. 2014. seL4 Libraries. Retrieved from https:\/\/github.com\/seL4\/seL4_libs.  National ICT Australia and other contributors. 2014. seL4 Libraries. Retrieved from https:\/\/github.com\/seL4\/seL4_libs."},{"key":"e_1_2_1_18_1","unstructured":"National ICT Australia and other contributors. 2014. util_libs. Retrieved from https:\/\/github.com\/seL4\/util_libs.  National ICT Australia and other contributors. 2014. util_libs. Retrieved from https:\/\/github.com\/seL4\/util_libs."},{"key":"e_1_2_1_19_1","volume-title":"Secure hash signature standard (shs) (fips pub 180-2)","author":"National Institute of Standards and Technology.","year":"2002","unstructured":"National Institute of Standards and Technology. Secure hash signature standard (shs) (fips pub 180-2) . 2002 . National Institute of Standards and Technology. Secure hash signature standard (shs) (fips pub 180-2). 2002."},{"key":"e_1_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1145\/112600.112605"},{"key":"e_1_2_1_21_1","unstructured":"M. J. Saarinen and J. P. Aumasson. 2015. The BLAKE2 Cryptographic Hash and Message Authentication Code (MAC). Technical Report.  M. J. Saarinen and J. P. Aumasson. 2015. The BLAKE2 Cryptographic Hash and Message Authentication Code (MAC). Technical Report."},{"key":"e_1_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978335"},{"key":"e_1_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.scico.2008.09.005"},{"key":"e_1_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1109\/SECPRI.2004.1301329"},{"key":"e_1_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1145\/1161289.1161306"},{"key":"e_1_2_1_26_1","volume-title":"Advances in Cryptology\u2014CRYPTO","author":"Stevens Marc","year":"2017","unstructured":"Marc Stevens , Elie Bursztein , Pierre Karpman , Ange Albertini , and Yarik Markov . 2017. The first collision for full SHA-1 . In Advances in Cryptology\u2014CRYPTO 2017 . Marc Stevens, Elie Bursztein, Pierre Karpman, Ange Albertini, and Yarik Markov. 2017. The first collision for full SHA-1. In Advances in Cryptology\u2014CRYPTO 2017."},{"key":"e_1_2_1_27_1","volume-title":"Proceedings of the Workshop on Advances in Trusted Computing (WATC\u201906)","author":"Stumpf Frederic","year":"2006","unstructured":"Frederic Stumpf , Omid Tafreschi , Patrick R\u00f6der , and Claudia Eckert . 2006 . A robust integrity reporting protocol for remote attestation . In Proceedings of the Workshop on Advances in Trusted Computing (WATC\u201906) . Frederic Stumpf, Omid Tafreschi, Patrick R\u00f6der, and Claudia Eckert. 2006. A robust integrity reporting protocol for remote attestation. In Proceedings of the Workshop on Advances in Trusted Computing (WATC\u201906)."},{"key":"e_1_2_1_28_1","unstructured":"Texas Instruments. 2017. MSP430-GCC-OPENSOURCE GCC\u2014Open Source Compiler for MSP Microcontrollers. Retrieved from http:\/\/www.ti.com\/tool\/MSP430-GCC-OPENSOURCE.  Texas Instruments. 2017. MSP430-GCC-OPENSOURCE GCC\u2014Open Source Compiler for MSP Microcontrollers. Retrieved from http:\/\/www.ti.com\/tool\/MSP430-GCC-OPENSOURCE."},{"key":"e_1_2_1_29_1","unstructured":"Jaikumar Vijayan. 2010. Stuxnet renews power grid security concerns. Retrieved from http:\/\/www.computerworld.com\/article\/2519574\/security0\/stuxnet-renews-power-grid-security-concerns.html.  Jaikumar Vijayan. 2010. Stuxnet renews power grid security concerns. Retrieved from http:\/\/www.computerworld.com\/article\/2519574\/security0\/stuxnet-renews-power-grid-security-concerns.html."},{"key":"e_1_2_1_30_1","unstructured":"Xilinx. 2013. ISE Design Suite. Retrieved from https:\/\/www.xilinx.com\/content\/xilinx\/en\/downloadNav\/design-tools\/v2012_4---14_7.html.  Xilinx. 2013. ISE Design Suite. Retrieved from https:\/\/www.xilinx.com\/content\/xilinx\/en\/downloadNav\/design-tools\/v2012_4---14_7.html."}],"container-title":["ACM Transactions on Design Automation of Electronic Systems"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3279950","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3279950","content-type":"application\/pdf","content-version":"vor","intended-application":"syndication"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3279950","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T21:01:50Z","timestamp":1750194110000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3279950"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2018,12,21]]},"references-count":29,"journal-issue":{"issue":"1","published-print":{"date-parts":[[2019,1,31]]}},"alternative-id":["10.1145\/3279950"],"URL":"https:\/\/doi.org\/10.1145\/3279950","relation":{},"ISSN":["1084-4309","1557-7309"],"issn-type":[{"value":"1084-4309","type":"print"},{"value":"1557-7309","type":"electronic"}],"subject":[],"published":{"date-parts":[[2018,12,21]]},"assertion":[{"value":"2018-03-01","order":0,"name":"received","label":"Received","group":{"name":"publication_history","label":"Publication History"}},{"value":"2018-09-01","order":1,"name":"accepted","label":"Accepted","group":{"name":"publication_history","label":"Publication History"}},{"value":"2018-12-21","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}