PRoM: Passive Remote Attestation Against Roving Malware in Multicore IoT Devices

Abstract

This article focuses on developing a hybrid attestation technique for multicore Internet of Things (IoT) devices and introduces passive remote attestation against roving malware (PRoM). The two main objectives of PRoM are to ensure security against roving malware and high availability of the IoT devices while their attestation is being carried out. The proposed technique requires minimal secure hardware combined with a randomized approach to detect roving malware in IoT devices. We present an experimental validation of the proposed technique using a Raspberry Pi setup. A comparison with the existing attestation techniques shows that PRoM has a significantly lower execution time while maintaining a higher probability of detection for an adversary. Moreover, PRoM does not affect the normal operation of IoT devices and, therefore, ensures high availability.