New Directions: Proof-Carrying Sensing
Towards Real-World Authentication in Cyber-Physical Systems
keywords
Cyber-Physical Systems, Security, Information Forensics.
Paper
Wu, Min, Pereira, Fernando M. Quintão Liu, Jie, Ramos, Heitor S., Alvim, Mário S., Oliveira, Leonardo B. Proof-Carrying Sensing: Towards Real-World Authentication in Cyber-Physical Systems. 15th ACM Conference on Embedded Network Sensor Systems (SenSys). 2017.
Abstract
It is paramount to ensure secure and trustworthy operations in Cyber-Physical Systems (CPSs), guaranteeing the integrity of sens- ing data, enabling access control, and safeguarding system-level operations. In this paper, we address trustworthy operations of next generation CPSs. Our idea is inspired by a trustworthy computing framework known as Proof-Carrying Code, in which foreign exe- cutables carry a model to prove that they have not been tampered with and they function as expected. In our context, we leverage the physical world–a channel that encapsulates properties impossible to tamper with remotely, such as proximity and causality–to create a challenge-response function. We call it Proof-Carrying Sensing and use it to help authenticate devices, collected data, and locations. A unique advantage of this approach, vis-à-vis traditional multi- factor or out-of-band authentication mechanisms, is that authenti- cation proofs are embedded in sensor data and can be continuously validated over time and space without resorting to complicated cryptographic algorithms. This, in turn, makes it t particularly well to CPSs where mobility and resource constraints are common.
The proposed Proof-Carrying Sensing framework and new opportunities for sensing authentication in CPSs.
BibTeX
@inproceedings{Wu:2017:PST:3131672.3131700,
author = {Wu, Min and Pereira, Fernando M. Quint\~{a}o and Liu, Jie and Ramos, Heitor S. and Alvim, M\'{a}rio S. and Oliveira, Leonardo B.},
title = {Proof-Carrying Sensing: Towards Real-World Authentication in Cyber-Physical Systems},
booktitle = {15th ACM Conference on Embedded Network Sensor Systems {SenSys'17}},
year = {2017},
}