Attestation has become a promising approach for ensur ing software integrity in wireless sensor networks. How ever, current attestation either focuses on static system properties, e.g., code integrity, or requires hardware sup port such as Tr usted Platform Module (TPM). However, there are attacks exploiting vulnerabilities that do not vio late static system properties, and sensor platforms may not have hardware-based security support. This paper presents a software attestation scheme for dynamic data integrity based on data boundary integrity. It automatically trans forms the source code and inserts data guards to track run time program data. A data guard is unrecoverable once it is corrupted by an attacker, even if the attacker fully con trols the system later. The corruption of any data guard at runtime can be remotely detected. A corruption either indi cates a software attack or a bug in the software that needs immediate attention. The benefits of the proposed attesta tion scheme are as follows. First, it does not rely on any additional hardware support, making it suitable for low cost sensor nodes. Second, it introduces minimal communi cation cost and has adjustable runtime memory overhead. Third, it works even if sensor nodes use diff erent hardware platforms, as long as they run the same software. The pro totype implementation and the experiments on Te losB motes show that the proposed technique is both effective and effi cient for sensor networks.
Zhang and Liu REF propose a dynamic software attestation scheme in sensor networks.
DataGuard: Dynamic data attestation in wireless sensor networks
2010 IEEE/IFIP International Conference on Dependable Systems & Networks (DSN)
2010 IEEE/IFIP International Conference on Dependable Systems & Networks (DSN)
Computer Science