The TPM.dev is a community of over 450 developers who collaborate openly and meet online to discuss on hardware security and its usage. The community is dedicated to TPM (Trusted Platform Module), a chip that improves the security of computers by creating and storing cryptographic keys and verifying the operating system and firmware, and aims to share knowledge and resources for developers who want to integrate better security into their projects.

Thanassis Giannetsos, from UBITECH and ASSURED Technical Coordinator, and his colleagues Stefanos Vasileiadis and Alexandros Sampanis, showcased a presentation on ASSURED trusted computing activities and especially the latest implementation activities on Attribute-based Encryption, the creation of a TPM-based Wallet and research of new approaches for Direct Anonymous Attestation (DAA) and Control Flow Attestation. The work presented at the conference also involved the CONNECT project’s updates.

Their presentation was held in the Community Talk session and was entitled “Are we there Yet? Decentralized Trust Anchors towards Sustainable Security”.

The original recording is available on TPMdev Vimeo channel with the full TPMdev 2023 conference. Watch the presentation here below to learn more.

The post ASSURED at the TPM.dev 2023 conference appeared first on ASSURED.

Three presentations were given by members of the ASSURED consortium, discussing various aspects of the Blockchain-related components and functionalities of ASSURED. First, the motivation behind the use of Blockchain technologies in ASSURED framework was discussed, and the positioning of the Blockchain Infrastructure and related components was presented. Next, an overview of the core design of the ASSURED Blockchain was provided, as well as a technical description of the relevant data management and access control schemes, namely Attribute-Based Encryption (ABE), Attribute-Based Access Control (ABAC), and Dynamic Symmetric Searchable Encryption (DSSE). Afterwards, the ASSURED TPM-based Wallet was presented, which constitutes a significant step forward towards adopting decentralized user-centric identity management based on the concept of Self-Sovereign Identities (SSI), aiming to shift the responsibility of identity management to the devices themselves by providing hardware-based trustworthiness guarantees. Finally, demo presentations of the ASSURED framework were performed on the execution flow of the entire ASSURED framework, including the generation and deployment of the attestation policies to the Blockchain, the execution of the attestation actions specified in these policies by the target device, and the storage of the attestation report on the Blockchain.

The webinar was attended by experts and academics from various application domains, and was part of the ASSURED dissemination activities geared towards sharing the outcomes and innovations of the project, both from a research and an implementation standpoint. This is particularly significant in the case of Blockchain technologies, since they have recently attracted considerable research interest and are used in a wide variety of applications. This webinar was a significant step towards sharing the contributions of ASSURED in this regard, and towards the advancement of the state-of-the-art in research fields related to Blockchain and data sharing methods.

The slides are available here:

• ASSURED Vision Towards Trustworthy “Systems-of-Systems” and Secure Data Sharing | Dimitris Karras, UBITECH
• Blockchain-Empowered Mobile Edge Intelligence for Secure and Sustainable Computing | Kaitai Liang, TU Delft
• Privacy Respecting Identity Verification Enabler for Digital Identity Wallets | Stefanos Vasileiadis, UBITECH

If you miss the webinar, the recording is available below and on our YouTube channel.

The post Blockchain-Empowered Mobile Edge Intelligence for Secure and Sustainable Computing appeared first on ASSURED.

Five presentations were given by members of the ASSURED consortium, discussing various aspects of the tracing mechanisms of ASSURED and outlining their innovations and contributions. First, the positioning of tracing within the ASSURED framework was presented, as well as its role in achieving operational assurance in complex service graph chains. In addition, existing tracing mechanisms and tools were analyzed, focusing on their evolution over time and the path towards achieving non-intrusive tracing of software processes. Next, the software-based tracing mechanisms of ASSURED were presented. These support the ASSURED attestation toolkit and, unlike existing state-of-the-art solutions, do not require custom hardware extensions and offer multi-level execution tracing with the required timing guarantees and minimal trust assumptions. The hardware-based tracing mechanisms of ASSURED were also analyzed, which leverage Coresight in order to provide a highly efficient collection of software execution data. A live demo of the implemented attestation mechanisms was also performed, demonstrating their performance and efficiency. Finally, the role of tracing in supporting the ASSURED remote attestation mechanisms was presented based on their ability to collect attestation evidence in a secure and trustworthy manner.

The webinar was attended by experts and academics from various application domains and was part of the dissemination activities of ASSURED on sharing the outcomes and innovations of the project with the scientific community towards advancing the state-of-the-art in a wide array of research fields and practical applications. In addition, this webinar was part of the envisioned open-source activities of ASSURED, where all internal components and mechanisms will be open for download and testing. In this regard, technical details were also provided on how all these tools can be set up and deployed to any testbed.

The slides are available here:

• ASSURED Vision Towards Trustworthy “Systems-of-Systems” | Dimitris Karras, UBITECH
• Introduction to Tracing | Ahmad Atamli, NVIDIA
• Non-Intrusive Code Coverage: Efficient SW-based Tracing | Meni Orenbach, NVIDIA
• Leveraging Tracing for Efficient Attestation | Stefanos Vasileiadis, UBITECH

If you miss the webinar, the recording is available below and on our YouTube channel.

The post Non-intrusive Code Coverage: How To Use ASSURED For Trace-based Debugging and Runtime Analysis appeared first on ASSURED.

As part of the workshop, the various standardization activities performed as part of the ASSURED project were presented. First, the collaboration of ASSURED with the Trusted Computing Group (TCG) was highlighted. The TCG is the internationally accepted standardization group, which sets all relevant technologies and standards for Trusted Computing (TC) and relevant assurance and attestation schemes. Specifically, ASSURED has established liaison with the TPM Working Group and the Internet of Things Working Group of the TCG, towards integrating decentralized roots-of-trust in complex system environments. In addition, ASSURED has actively participated in the design and specification of a new revocation protocol for potentially compromised devices, which was included in the new version of the Trusted Software Stack (TSS). The ASSURED partners UBITECH and DTU have also collaboratively identified a bug in the TPM specification involving an infinite hash loop, and proposed an elegant solution that was included in the updated TSS specification and implementation.

The collaboration of ASSURED with the Decentralized Identity Foundation (DIF) and the European Self-Sovereign Identity Lab (eSSIF-Lab) was also highlighted, aiming to achieve digital and data sovereignty for users or devices. The goal of ASSURED in this regard is to provide the capabilities to shift control to users themselves over their own identity. In addition, as SSI implementations do not typically contain trust management approaches, ASSURED has made significant contributions towards their adoption, as well as the secure hardware integration into the SSI domain through the ASSURED TPM-based Wallet. In addition, ASSURED has established collaboration with the ISO TC 307 committee, focused on the standardization of Blockchain and distributed ledger technologies towards achieving efficient identity management.

Finally, the standardization efforts of ASSURED for establishing trust in the automotive industry were presented, particularly through its contributions into the Trust4Auto Working Item of the 5G Automotive Association (5GAA) WP7, where ASSURED will provide guidance into how to establish a high level of trust into exchanged data and MEC applications for enabling CCAM scenarios.

The participation of ASSURED in this workshop was an important part of the dissemination activities of the project, as well as a great opportunity to share the various standardization activities of ASSURED with a wide variety of industry experts and members of standardization bodies.

More details are available here: https://www.cyrene.eu/cyrene-standardisation-event/

The post ASSURED at the CYRENE’s Standardization Workshop appeared first on ASSURED.

The eighth ASSURED expert interview focuses on the most pressing challenges in cybersecurity and their potential solutions. This round features Edlira Dushku and Benjamin Larsen, renowned cybersecurity experts from the Technical University of Denmark, who shared their insights on the urgent cybersecurity challenges that ASSURED is tackling.

The ASSURED partners emphasised the importance of the security-by-design principle and the need for techniques to detect compromised devices amidst the growing number of cyber-attacks.

Edlira and Benjamin also discussed about the need to move towards sustainable security solutions, stating that the research and industry must focus on future-proof security mechanisms. Despite technical hurdles, they were optimistic about ASSURED progress and hopeful about the positive impacts the project could bring to the cybersecurity landscape.

The post ASSURED interview series spotlights cybersecurity challenges and sustainable solutions appeared first on ASSURED.

Four presentations were given by members of the ASSURED consortium, discussing various technological outcomes and services provided by ASSURED regarding remote attestation. Specifically, design and implementation details were provided on the Machine Learning-based Control-Flow Attestation mechanism, which is able to achieve highly accurate and efficient detection of threats such as control and non-control attacks. In addition, the ASSURED Configuration Integrity Verification scheme was presented, including the innovations of ASSURED regarding the achievement of zero-knowledge attestation. The Direct Anonymous Attestation protocol was also presented, which is a major step forward towards achieving privacy-preserving platform authentication. In addition, a technical walkthrough and description of how to set up and use the tools provided by the ASSURED framework was performed.

The webinar was attended by more than 50 people from different academic and technical backgrounds, and was part of the dissemination activities of ASSURED on sharing the research outcomes and innovations of the project to industry professionals and cybersecurity experts, towards advancing the state-of-the-art in various research fields.

The slides are available here:

• ASSURED Vision Towards Trustworthy “Systems-of-Systems” | Dimitris Karras, UBITECH
• ML-based Attestation and Verification on Trusted Platform | Marco Chilese, Richard Mitev, Technical University of Darmstadt
• Configuration Integrity Verification | Alexandros Sampanis, UBITECH
• Direct Anonymous Attestation and Identity Management | Stefanos Vasileiadis, UBITECH

If you miss the webinar, the recording is available below and on our YouTube channel.

The post Towards Practical Solutions for Efficient and Scalable Attestation Capabilities appeared first on ASSURED.

The workshop was attended by renowned scientists discussing the latest developments and advancements in the field of trusted computing towards sustainable security in systems-of-systems. The workshop provided a stage for the invited researchers and scientists to present recent works, share their ideas and trigger active discussions among the attendants, focusing on the challenges faced by the industry and academia in implementing potential solutions to address the open challenges of the field.

The two-day interactive workshop agenda gave the opportunity to touch upon hot search topics for guaranteeing runtime integrity of the embedded system’s hardware and software. Top-notch research solutions were presented for “inexpensive” hardware/software co-designs for proactive and prevention-based attestation approaches, non-intrusive system introspection techniques for monitoring the runtime state of a wide range of systems from cloud to IoT, randomized testing (“fuzzing”) methods for program analysis techniques and Post-Quantum Direct Anonymous Attestation (PQ-DAA). In addition, novel AI-based solutions for enhancing the trusted computing landscape were presented, focusing on the detection of side-channel attacks and zero-assumption Control-Flow Attestation as promising solutions towards achieving sustainable security of SoS.

The ASSURED Scientific Workshop was a great opportunity for communicating the project’s results and developed solutions to leading research and industry players of the field. The core technical developments of ASSURED were presented to the participants to promote knowledge-sharing, while valuable insights and positive feedback was given by the participants for the latest developments of the project, triggering discussions for further advancements and paving the way for future collaborations and partnerships.

ASSURED Scientific Workshop slides

• Introduction to ASSURED | Dimitris Papamartzivanos, UBITECH
• Trusted Environment for Future Consumer Devices | Jan-Erik Ekberg, Huawei
• Financial Crime Detection with Privacy | Zeki Erkin, Delft University of Technology
• CASU: Compromise Avoidance via Secure Updates for Low-end Embedded Systems | Gene Tsudik, University of California
• PrivateAI – Protecting security and privacy for the life-cycle of machine learning | Matthias Schunter, Intel Labs Europe
• System Tracing: From Cloud to IoT | Ahmad Atamli, NVIDIA
• Post-Quantum Direct Anonymous Attestation (PQ-DAA) | Nada El Kassem, University of Surrey
• A software-based approach to secure bare-metal devices | Bruno Crispo, University of Trento
• Are the Trust Frameworks ready? Towards achieving Digital Sovereignty in Decentralized Ecosystems and its role in Credentials Exchange | Bithin Alangot, Huawei
• Securing location and reducing device exposure | Panagiotis Papadimitratos, KTH Royal Institute of Technology
• GNNs-Based Zero-Assumption Control-Flow Attestation | Marco Chilese, Technical University of Darmstadt
• Are we there Yet? Decentralized Trust Anchors as the Future of Digital Identity Verification | Benjamin Larsen, Technical University of Denmark
• Enhanced DAA flavors and Trust Revocation in Distributed Environments | Dimitris Papamartzivanos and Stefanos Vasileiadis, UBITECH
• Searchable Symmetric Encryption and its attacks | Kaitai Liang, Technical University of Delft
• Security challenges and trusted computing in the Smart Satellites domain | Emmanouil Bakiris, SPACE HELLAS

The post The ASSURED Scientific Workshop in Darmstadt appeared first on ASSURED.

The seventh expert interview series features Stylianos Basagiannis from Collins Aerospace, which leads the project’s use case on digital security of smart aerospace.

In our interview, Stylianos talked about the urgent problem in cybersecurity research that the ASSURED t is trying to solve. As aerospace systems are becoming more connected and integrated, new security mechanisms are required to ensure the correct, safe, and secure operation of cyber-physical systems.

The interview covers the integration of security solutions in a safety-critical application domain like aerospace and how it can help protect the supply chain operations in the industry. Stylianos also talked about the challenges of conducting tests on actual hardware and the need for multidisciplinary collaboration in such projects. Finally, he discussed the strategic exploitation avenues that Collins Aerospace is targeting after the end of ASSURED and what success would look like for the company.

The post Securing the future of Smart Aerospace: Insights from ASSURED expert Stylianos Basagiannis appeared first on ASSURED.

The ERICyb cluster comprises seven projects (ASSURED, BIECO, CYRENE, FISHY, IoTAC, SANCUS and SIFIS-HOME) that have received funding from the Horizon 2020 program of the European Commission.

Kaitai Liang, from TU Delft, and Dimitri Karras, from UBITECH presented the ASSURED framework over the course of three days. The BCC was a great meeting point for various people and organizations belonging to academic, industrial, and corporate backgrounds from all over the world, who were interested in getting informed about state-of-the-art in IoT solutions and cybersecurity services. We had the opportunity to expand our research horizons by getting to know new cybersecurity-related tools, which may be integrated into various future research efforts or applications.

At BCC, we had the opportunity to interact with individuals, companies, and organizations who were greatly interested in the ASSURED project, both on a technical level and on a practical level. Specifically, we met a wide variety of people, students, academics, and industry professionals, who were interested in learning further technical information and details about the various services provided by ASSURED, such as the tracer, the Blockchain infrastructure, and the various attestation enablers. In addition, we were approached by several industry professionals and representatives from organizations belonging to various industrial domains, such as factories and robotics institutes. These meetings have the potential to significantly expand the market outreach of the ASSURED framework and identify new application scenarios.

We were also able to meet like-minded individuals, who were eager to learn more about our topics of expertise, such as the use of hardware-based trusted computing and Blockchain-related solutions, and opened the door for many exciting future collaborations. Overall, BCC was a fantastic event, which fully fulfilled its purpose of being a worldwide hub for people seeking to expand their horizons.

The post ASSURED at the Barcelona Cybersecurity Congress 2023 appeared first on ASSURED.

The European Research Innovation for Cybersecurity (ERICyb cluster) is proud to announce that seven of its projects will be jointly exhibiting at the Barcelona Cybersecurity Congress, taking place between January 31st and February 2nd, 2023. This congress is co-located with the IoT Solutions World Congress, which is the leading IoT congress and exhibition not only in Europe, but globally.

The seven projects that will be participating in the exhibition are: ASSURED, BIECO, CYRENE, FISHY, IoTAC, SANCUS and SIFIS-HOME. All of these projects have received funding from the Horizon 2020 program of the European Commission. The projects will demonstrate state-of-the-art research results in various technical fields of cybersecurity, more specifically IoT security, and how they contribute to the protection of supply chains and operations of diverse industrial and consumer domains.

You can meet the researchers and developers who are working to improve the security of IoT architectures and supply chains at the stand C350 and this is an excellent opportunity to gain valuable insight into the latest developments in cybersecurity and IoT security.

Download the press release here.

Discover the projects involved:

• ASSURED project /
• BIECO project https://bieco.org/
• CYRENE project https://www.cyrene.eu/
• FISHY project https://fishy-project.eu/
• IoTAC project https://iotac.eu/
• SANCUS project https://sancus-project.eu/
• SIFIS-HOME project https://www.sifis-home.eu/

The post Visit ASSURED and the ERICyb cluster at the Barcelona Cybersecurity Congress 2023 appeared first on ASSURED.