One for All and All for One: GNN-based Control-Flow Attestation for Embedded Devices

arXiv:2403.07465v1 Announce Type: cross
Abstract: Control-Flow Attestation (CFA) is a security service that allows an entity (verifier) to verify the integrity of code execution on a remote computer system (prover). Existing CFA schemes suffer from impractical assumptions, such as requiring access to the prover's internal state (e.g., memory or code), the complete Control-Flow Graph (CFG) of the prover's software, large sets of measurements, or tailor-made hardware. Moreover, current CFA schemes are inadequate for attesting embedded systems due to their high …

abstract arxiv assumptions code computer control cs.cr cs.lg devices embedded embedded devices flow gnn integrity security service state type verify