Advanced Attacks and Protection Mechanisms in IoT Devices and Networks
Lejla Batina, Nele Mentens, Markus Miettinen, Naila Mukhtar, Thien Duc Nguyen, Md Masoom Rabbani, Phillip Rieger, Ahmad‐Reza Sadeghi · 2021
In the past decade, the Internet of Things (IoT) has emerged as a wonder-pill to our problems. This chapter gives an overview of physical security threats and protection mechanisms of low-end IoT devices, focusing on side-channel analysis (SCA) and fault analysis attacks. It concentrates on remote attestation (RA) techniques, that aim at detecting malicious changes in the device’s firmware by requesting a proof to verify the sanity of the device. RA is a security protocol that runs between a trusted party called Verifier and “potentially” untrusted party called Prover. Primarily, RA techniques can be subdivided into three main categories: software-based RA; hardware-based RA, and hybrid architecture-based RA. The chapter discusses challenges that IoT malware poses on IoT systems and introduces state-of-the-art intrusion detection approaches for IoT networks for coping with such threats.