Results of the summarizing process for the arXiv paper: 2105.02435v2

This paper explores the possibility of using side-channel information captured by an analog-to-digital converter (ADC) within the same System-on-Chip (SoC) as the processor system (PS) to perform attestation. The authors propose capturing voltage fluctuations at its input terminal while a certain operation is taking place, which can be used to characterize and distinguish it from other binaries. This approach eliminates the requirement for physical proximity, which is necessary for other methods that use external setups to capture electromagnetic emanation. The attestation protocol involves three phases: Setup Phase, Trusted Launch Phase, and Computations Phase. During the Setup Phase, each entity receives a public/private key pair. In the Trusted Launch Phase, Verifier V launches a Trusted Execution Environment (TEE) on an untrusted platform with the help of a setup function Fs publicly known. Finally, in the Computations Phase, P executes applications chosen by V while measuring power consumption through ADCs and sending traces to V for verification against templates stored in Measurements Tray (MT), an independent cloud component responsible for storing templates and comparing them with traces received by V. This research was funded by various organizations such as European Research Council (ERC), ASCLEPIOS project under EU research project No. 826093, Cybersecurity Research Award granted by Technology Innovation Institute (TII), i-LINK+ 2019 “Advancing in cybersecurity technologies” Ref.LINKA20216 supported by CSIC's Andalusia ESF Operational Programme 2014-2020 and HPY Research Foundation. However, this proof-of-concept work has limitations that need to be addressed in future studies such as improving true positive rates and addressing substitution attacks.

• - The paper explores using side-channel information captured by an ADC in the same SoC as the PS to perform attestation.
• - Voltage fluctuations at the input terminal can be used to characterize and distinguish certain operations from other binaries.
• - This approach eliminates the need for physical proximity required by other methods that use external setups to capture electromagnetic emanation.
• - The attestation protocol involves three phases: Setup Phase, Trusted Launch Phase, and Computations Phase.
• - During the Setup Phase, each entity receives a public/private key pair.
• - In the Trusted Launch Phase, Verifier V launches a TEE on an untrusted platform with the help of a setup function Fs publicly known.
• - In the Computations Phase, P executes applications chosen by V while measuring power consumption through ADCs and sending traces to V for verification against templates stored in Measurements Tray (MT), an independent cloud component responsible for storing templates and comparing them with traces received by V.
• - The research was funded by various organizations such as ERC, ASCLEPIOS project under EU research project No. 826093, Cybersecurity Research Award granted by TII, i-LINK+ 2019 “Advancing in cybersecurity technologies” Ref.LINKA20216 supported by CSIC's Andalusia ESF Operational Programme 2014-2020 and HPY Research Foundation.
• - Limitations of this proof-of-concept work include improving true positive rates and addressing substitution attacks.

This paper talks about a way to check if a computer is safe from bad guys. They use something called an ADC to measure electricity and see what the computer is doing. This helps them know if the computer is doing what it's supposed to do or if someone is trying to hack it. They don't need to be close to the computer like other ways of checking, which is good. There are three parts to this checking process: Setup, Trusted Launch, and Computations. Some groups gave money for this research but there are still things they need to work on like making sure they catch all the bad stuff and stopping people from tricking the system. Definitions- ADC: A device that measures electricity - SoC: A type of computer chip - Attetation: Checking if a computer is safe from hackers - Binary: A way computers store information using only 1s and 0s - Proximity: How close something is

Using Side-Channel Information to Perform Attestation

Attestation is a process of verifying the integrity and authenticity of a system or application. It is used to ensure that the system or application has not been tampered with and that it is running in its intended state. In this article, we will discuss a research paper which explores the possibility of using side-channel information captured by an analog-to-digital converter (ADC) within the same System-on-Chip (SoC) as the processor system (PS) to perform attestation.

Background

Attestation is typically performed by external setups such as Trusted Platform Modules (TPMs), which use electromagnetic emanation for capturing power consumption traces from devices under test. However, these methods require physical proximity between verifier V and prover P, making them unsuitable for remote scenarios. To address this limitation, researchers have proposed various solutions such as using hardware sensors on SoCs to capture side channel information while executing certain operations.

Research Paper Overview

The authors propose capturing voltage fluctuations at its input terminal while a certain operation is taking place, which can be used to characterize and distinguish it from other binaries. This approach eliminates the requirement for physical proximity, which is necessary for other methods that use external setups to capture electromagnetic emanation. The attestation protocol involves three phases: Setup Phase, Trusted Launch Phase, and Computations Phase. During the Setup Phase, each entity receives a public/private key pair. In the Trusted Launch Phase, Verifier V launches a Trusted Execution Environment (TEE) on an untrusted platform with the help of a setup function Fs publicly known. Finally, in the Computations Phase, P executes applications chosen by V while measuring power consumption through ADCs and sending traces to V for verification against templates stored in Measurements Tray (MT), an independent cloud component responsible for storing templates and comparing them with traces received by V .

Funding & Limitations

This research was funded by various organizations such as European Research Council (ERC), ASCLEPIOS project under EU research project No. 826093 , Cybersecurity Research Award granted by Technology Innovation Institute (TII), i-LINK+ 2019 “Advancing in cybersecurity technologies” Ref LINKA20216 supported by CSIC's Andalusia ESF Operational Programme 2014 - 2020and HPY Research Foundation . However , this proof - of - concept work has limitations that need to be addressed in future studies such as improving true positive rates and addressing substitution attacks .

Conclusion

In conclusion , this research paper proposes an innovative solution for performing attestation without requiring physical proximity between verifier V and prover P . By leveraging side channel information captured through ADCs , it eliminates many security risks associated with traditional methods . Although there are some limitations that need further investigation , this work provides valuable insights into how attestation can be done remotely without compromising security .