ICACT20220401 Question.1
Questioner: zhouzijiao995@163.com 2022-02-14 오후 12:12:00 |
ICACT20220401 Answer.1
Answer by Auhor ktkim@etri.re.kr 2022-02-14 오후 12:12:00
Chrome  Click!! |
| What can the level of trust of the IoT device represent， and what is its use？ |
Integrity Measurement Architecture specifies the level of trust of IoT devices.
Hardware, CRTM(Core root of trust management), BIOS, Kernel, Measurement list and PCR is a chain of level of trust in IoT device. |
ICACT20220401 Question.2
Questioner: tomayoon@ieee.org 2022-02-14 오전 11:56:14 |
ICACT20220401 Answer.2
Answer by Auhor ktkim@etri.re.kr 2022-02-14 오전 11:56:14
Chrome Click!! |
| First of all, thank you for the good research paper and presentation contents. I would like to know more about the research environment used in this study, and also in detail about the equipment & operating systems, development languages and software libraries you used. |
Server
- Programming language : C
- OS ubuntu 18.04 LTS
IoT devices
- TPM : Platfrom Model: Raspberry Pi 3 Model B+ (Raspbian GNU/Linux 9 (stretch) Version: June 2018, kernel version: 4.14.50-v7++
- OP-TEE : ARM NXP Sabre SD Borad. OS: Wayland OS-Normal World, OP-TEE OS-Secure World
- OPEN-TEE : Raspberry Pi 3 Model B+, Ubuntu Mate OS–Normal World, OPEN-TEE OS–Secure World)
|
ICACT20220401 Question.3
Questioner: yohira@yamaguchi-u.ac.jp 2022-02-15 오전 9:43:40 |
ICACT20220401 Answer.3
Answer by Auhor ktkim@etri.re.kr 2022-02-15 오전 9:43:40
Chrome Click!! |
| Can the proposed framework be applied to devices that must accept frequent changes in configuration values? |
Yes, the remote attestation can keep track of frequent changes of the configuration. |
ICACT20220401 Question.4
Questioner: shenhanji@cnic.cn 2022-02-15 오전 10:48:38 |
ICACT20220401 Answer.4
Answer by Auhor ktkim@etri.re.kr 2022-02-15 오전 10:48:38
Chrome Click!! |
| The large-scale malware infection of IoT devices is a good research direction. Can you tell us how to obtain the data source of Internet of things devices and how to ensure the real-time detection? |
Good question. it is hard to achieve real time detection for infection of devices, but if the period of monitoring the devices, polling interval is short as much as possible, then the response of the result can be short. Thus, the performance of the real-time detection depends on the monitoring algorithm. Recent studies focuses on the collective attestation based on decentralized algorithm like block chain to overcome this problem. I don't understand the question "how to obtain the data source of Internet of things devices". |
ICACT20220401 Question.5
Questioner: vasaka.vis@mahidol.ac.th 2022-02-16 오전 10:28:01 |
ICACT20220401 Answer.5
Answer by Auhor ktkim@etri.re.kr 2022-02-16 오전 10:28:01
Chrome Click!! |
| The proposed work is very interesting.
By the way, do you have a presentation video of the demo video?
On your slide No.19, you said "Demo", but we cannot see the video :(
Thank you |
The presentation only contains image(jpeg) and text. I'm sorry not to show the demo video. |
ICACT20220401 Question.6
Questioner: ruigelwang@163.com 2022-02-16 오전 10:34:17 |
ICACT20220401 Answer.6
Answer by Auhor ktkim@etri.re.kr 2022-02-16 오전 10:34:17
Chrome Click!! |
| Has the remote attestation framework you proposed been applied in actual scenarios? What was the effect? |
The actual scenario is described in the paper. When the malware script is performed (download malware automatically) the proposed framework detects modified ones and recovers them in real-time. |
ICACT20220401 Question.7
Questioner: yanyonghang@henu.edu.cn 2022-02-16 오전 11:15:08 |
ICACT20220401 Answer.7
Answer by Auhor ktkim@etri.re.kr 2022-02-16 오전 11:15:08
Chrome Click!! |
| What are the advantages of your proposed framework over other framework? What are the current shortcomings? What will the future research focus on? |
Malware detection and device health verification are security-critical infrastructure services. It can be used as a security monitoring and control framework for security threats in large-scale IoT infrastructures, such as enterprises, institutions, and national defense.
The contribution of this paper is twofold: real-time monitoring of massive malware infections of IoT devices and heterogeneous support of the TEE (Trusted Execution Environment) platform.
These various device platforms can interact through the cloud service as a common remote trust management framework.
It is hard to achieve real time detection for infection of devices, but if the period of monitoring the devices, polling interval is short as much as possible, then the response of the result can be short. Thus, the performance of the real-time detection depends on the monitoring algorithm. Recent studies focuses on the collective attestation based on decentralized algorithm like block chain to overcome this problem. |
ICACT20220401 Question.8
Questioner: namacabale@gmail.com 2022-02-17 오후 2:08:28 |
ICACT20220401 Answer.8
Answer by Auhor ktkim@etri.re.kr 2022-02-17 오후 2:08:28
Chrome Click!! |
| Dear Author, you have a very good research. Is there an existing technology almost similar to your proposal that has been deployed in real world environment? What does it lack that your work specifically addressed? Thank you and stay safe. |
You can refer to the related work in this paper.
The contribution of this paper is twofold: real-time monitoring of massive malware infections of IoT devices and heterogeneous support of the TEE (Trusted Execution Environment) platform.
The framework is optimized for hyper-connected, large-scale, and lightweight device environments. |
