{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,7]],"date-time":"2026-10-07T18:51:51Z","timestamp":1791399111906,"version":"4.3.3"},"reference-count":97,"publisher":"Association for Computing Machinery (ACM)","issue":"3","license":[{"start":{"date-parts":[[2016,9,16]],"date-time":"2016-09-16T00:00:00Z","timestamp":1473984000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"Brazilian National Council for Scientific and Technological Development","award":["206707\/2014-2"],"award-info":[{"award-number":["206707\/2014-2"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["ACM Comput. Surv."],"published-print":{"date-parts":[[2017,9,30]]},"abstract":"<jats:p>Attestation is a mechanism used by a trusted entity to validate the software integrity of an untrusted platform. Over the past few years, several attestation techniques have been proposed. While they all use variants of a challenge-response protocol, they make different assumptions about what an attacker can and cannot do. Thus, they propose intrinsically divergent validation approaches. We survey in this article the different approaches to attestation, focusing in particular on those aimed at Wireless Sensor Networks. We discuss the motivations, challenges, assumptions, and attacks of each approach. We then organise them into a taxonomy and discuss the state of the art, carefully analysing the advantages and disadvantages of each proposal. We also point towards the open research problems and give directions on how to address them.<\/jats:p>","DOI":"10.1145\/2988546","type":"journal-article","created":{"date-parts":[[2016,9,19]],"date-time":"2016-09-19T20:11:45Z","timestamp":1474315905000},"page":"1-31","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":54,"title":["Attestation in Wireless Sensor Networks"],"prefix":"10.1145","volume":"49","author":[{"given":"Rodrigo Vieira","family":"Steiner","sequence":"first","affiliation":[{"name":"Imperial College London, London, U.K"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Emil","family":"Lupu","sequence":"additional","affiliation":[{"name":"Imperial College London, London, U.K"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2016,9,16]]},"reference":[{"key":"e_1_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1145\/1102120.1102165"},{"key":"e_1_2_1_2_1","doi-asserted-by":"crossref","unstructured":"Tigist Abera N. Asokan Lucas Davi Jan-Erik Ekberg Thomas Nyman Andrew Paverd Ahmad-Reza Sadeghi and Gene Tsudik. 2016. C-FLAT: Control-flow attestation for embedded systems software. arXiv preprint arXiv:1605.07763 (2016).  Tigist Abera N. Asokan Lucas Davi Jan-Erik Ekberg Thomas Nyman Andrew Paverd Ahmad-Reza Sadeghi and Gene Tsudik. 2016. C-FLAT: Control-flow attestation for embedded systems software. arXiv preprint arXiv:1605.07763 (2016).","DOI":"10.1145\/2976749.2978358"},{"key":"e_1_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.5555\/1811982.1812159"},{"key":"e_1_2_1_4_1","volume-title":"Proceedings of the 2nd USENIX Workshop on Electronic Commerce (WOEC\u201996)","volume":"2","author":"Anderson Ross","year":"1996"},{"key":"e_1_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1145\/2508859.2516650"},{"key":"e_1_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1145\/2810103.2813670"},{"key":"e_1_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1145\/2660267.2660378"},{"key":"e_1_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2014.2320073"},{"key":"e_1_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.1145\/2897937.2898083"},{"key":"e_1_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-68979-9_2"},{"key":"e_1_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1145\/1455770.1455776"},{"key":"e_1_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1145\/1653662.1653711"},{"key":"e_1_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.5555\/1298455.1298470"},{"key":"e_1_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1145\/1866307.1866370"},{"key":"e_1_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.ipl.2010.06.007"},{"key":"e_1_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-85886-7_3"},{"key":"e_1_2_1_17_1","volume-title":"Proceedings of the 14th Conference on USENIX Security Symposium (SSYM\u201905)","author":"Chen Shuo"},{"key":"e_1_2_1_18_1","doi-asserted-by":"publisher","DOI":"10.5555\/1802954.1803061"},{"key":"e_1_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1007\/s10207-011-0124-7"},{"key":"e_1_2_1_20_1","doi-asserted-by":"publisher","DOI":"10.1145\/268946.268962"},{"key":"e_1_2_1_21_1","volume-title":"Proceedings of the 7th Conference on USENIX Security Symposium (SSYM\u201998)","author":"Cowan Crispin","year":"1998"},{"key":"e_1_2_1_22_1","volume-title":"Proceedings of Black Hat USA.","author":"Crane Stephen","year":"2015"},{"key":"e_1_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1145\/1089761.1089765"},{"key":"e_1_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2009.16"},{"key":"e_1_2_1_25_1","volume-title":"Proceedings of the 1993 USENIX Winter Conference. USENIX Association","author":"Douglis Fred","year":"1993"},{"key":"e_1_2_1_26_1","volume-title":"Proceedings of the 19th Network and Distributed System Security Symposium (NDSS\u201912)","author":"Eldefrawy Karim","year":"2012"},{"key":"e_1_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2011.15"},{"key":"e_1_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1145\/1455770.1455775"},{"key":"e_1_2_1_29_1","doi-asserted-by":"crossref","unstructured":"Aur\u00e9lien Francillon Claude Castelluccia Daniele Perito and Claudio Soriente. 2010. Comments on \u201cRefutation of On the Difficulty of Software-Based Attestation of Embedded Devices.\u201d  Aur\u00e9lien Francillon Claude Castelluccia Daniele Perito and Claudio Soriente. 2010. Comments on \u201cRefutation of On the Difficulty of Software-Based Attestation of Embedded Devices.\u201d","DOI":"10.1145\/1653662.1653711"},{"key":"e_1_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.5555\/2616606.2616905"},{"key":"e_1_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.5555\/648254.752700"},{"key":"e_1_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1145\/586110.586132"},{"key":"e_1_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1145\/2463183.2463186"},{"key":"e_1_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2014.43"},{"key":"e_1_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1145\/1352533.1352563"},{"key":"e_1_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1145\/1134680.1134685"},{"key":"e_1_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICSENS.2008.4716517"},{"key":"e_1_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.1109\/HST.2013.6581556"},{"key":"e_1_2_1_39_1","doi-asserted-by":"publisher","DOI":"10.1166\/jolpe.2008.156"},{"key":"e_1_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1145\/990680.990705"},{"key":"e_1_2_1_41_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2016.62"},{"key":"e_1_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1145\/2939918.2939938"},{"key":"e_1_2_1_43_1","volume-title":"Proceedings of the 29th IEEE Conference on Global Telecommunications Workshops (GLOBECOM\u201910)","author":"Jin Xinyu","year":"2059"},{"key":"e_1_2_1_44_1","volume-title":"Proceedings of the 16th USENIX Security Symposium (SS\u201907)","author":"Kauer Bernhard","year":"2007"},{"key":"e_1_2_1_45_1","volume-title":"Proceedings of the 12th Conference on USENIX Security Symposium (SSYM\u201903)","author":"Kennell Rick"},{"key":"e_1_2_1_46_1","unstructured":"Rick Kennell and Leah H. Jamieson. 2004. An Analysis of Proposed Attacks Against Genuinity Tests. Technical Report. CERIAS Purdue University West Lafayette.  Rick Kennell and Leah H. Jamieson. 2004. An Analysis of Proposed Attacks Against Genuinity Tests. Technical Report. CERIAS Purdue University West Lafayette."},{"key":"e_1_2_1_47_1","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2009.5270348"},{"key":"e_1_2_1_48_1","first-page":"25","article-title":"Lightweight attestation scheme for wireless sensor network","volume":"8","author":"Kiyomoto Shinsaku","year":"2014","journal-title":"Int. J. Secur. Appl."},{"key":"e_1_2_1_49_1","doi-asserted-by":"publisher","DOI":"10.1145\/2658999"},{"key":"e_1_2_1_50_1","doi-asserted-by":"publisher","DOI":"10.1145\/1814539.1814550"},{"key":"e_1_2_1_51_1","doi-asserted-by":"publisher","DOI":"10.5555\/646761.706156"},{"key":"e_1_2_1_52_1","doi-asserted-by":"publisher","DOI":"10.5555\/646764.703989"},{"key":"e_1_2_1_53_1","doi-asserted-by":"publisher","DOI":"10.1145\/2592798.2592824"},{"key":"e_1_2_1_54_1","doi-asserted-by":"publisher","DOI":"10.1145\/2593069.2593192"},{"key":"e_1_2_1_55_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2012.45"},{"key":"e_1_2_1_56_1","volume-title":"Proceedings of the ECRYPT Workshop on Cryptographic Advances in Secure Hardware (CRASH\u201905)","author":"Kursawe Klaus","year":"2005"},{"key":"e_1_2_1_57_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2014.25"},{"key":"e_1_2_1_58_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-11737-9_19"},{"key":"e_1_2_1_59_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.comcom.2010.02.006"},{"key":"e_1_2_1_60_1","doi-asserted-by":"publisher","DOI":"10.5555\/2022245.2022250"},{"key":"e_1_2_1_61_1","doi-asserted-by":"crossref","unstructured":"Michael Mitzenmacher and Eli Upfal. 2005. Probability and Computing: Randomized Algorithms and Probabilistic Analysis. Cambridge University Press.   Michael Mitzenmacher and Eli Upfal. 2005. Probability and Computing: Randomized Algorithms and Probabilistic Analysis. Cambridge University Press.","DOI":"10.1017\/CBO9780511813603"},{"key":"e_1_2_1_62_1","doi-asserted-by":"publisher","DOI":"10.1109\/NSS.2009.83"},{"key":"e_1_2_1_63_1","doi-asserted-by":"publisher","DOI":"10.1145\/984622.984660"},{"key":"e_1_2_1_64_1","article-title":"Smashing the stack for fun and profit","volume":"7","author":"One Aleph","year":"1996","journal-title":"Phrack Mag."},{"key":"e_1_2_1_65_1","doi-asserted-by":"crossref","unstructured":"Ravikanth Pappu Ben Recht Jason Taylor and Neil Gershenfeld. 2002. Physical one-way functions. Science 297 5589 (2002) 2026--2030. DOI:http:\/\/dx.doi.org\/10.1126\/science.1074376  Ravikanth Pappu Ben Recht Jason Taylor and Neil Gershenfeld. 2002. Physical one-way functions. Science 297 5589 (2002) 2026--2030. DOI:http:\/\/dx.doi.org\/10.1126\/science.1074376","DOI":"10.1126\/science.1074376"},{"key":"e_1_2_1_66_1","doi-asserted-by":"publisher","DOI":"10.1109\/TMC.2005.44"},{"key":"e_1_2_1_67_1","doi-asserted-by":"publisher","DOI":"10.5555\/1496671.1496680"},{"key":"e_1_2_1_68_1","doi-asserted-by":"publisher","DOI":"10.5555\/1888881.1888931"},{"key":"e_1_2_1_69_1","unstructured":"Adrian Perrig and Leendert Van Doorn. 2010. Refutation of \u201cOn the Difficulty of Software-Based Attestation of Embedded Devices.\u201d (2010).  Adrian Perrig and Leendert Van Doorn. 2010. Refutation of \u201cOn the Difficulty of Software-Based Attestation of Embedded Devices.\u201d (2010)."},{"key":"e_1_2_1_70_1","doi-asserted-by":"publisher","DOI":"10.1109\/5289.887458"},{"key":"e_1_2_1_71_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.jcss.2013.06.013"},{"key":"e_1_2_1_72_1","doi-asserted-by":"publisher","DOI":"10.1109\/CCNC.2006.1593102"},{"key":"e_1_2_1_73_1","doi-asserted-by":"publisher","DOI":"10.1145\/1866307.1866335"},{"key":"e_1_2_1_74_1","doi-asserted-by":"publisher","DOI":"10.1145\/1065907.1066038"},{"key":"e_1_2_1_75_1","doi-asserted-by":"publisher","DOI":"10.5555\/1251375.1251391"},{"key":"e_1_2_1_76_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-69170-9_25"},{"key":"e_1_2_1_77_1","doi-asserted-by":"publisher","DOI":"10.1145\/1161289.1161306"},{"key":"e_1_2_1_78_1","doi-asserted-by":"publisher","DOI":"10.1145\/1095809.1095812"},{"key":"e_1_2_1_79_1","doi-asserted-by":"publisher","DOI":"10.1109\/SECPRI.2004.1301329"},{"key":"e_1_2_1_80_1","doi-asserted-by":"publisher","DOI":"10.1145\/1315245.1315313"},{"key":"e_1_2_1_81_1","doi-asserted-by":"publisher","DOI":"10.1007\/11601494_3"},{"key":"e_1_2_1_82_1","volume-title":"Proceedings of the 13th Conference on USENIX Security Symposium (SSYM\u201904)","author":"Shankar Umesh"},{"key":"e_1_2_1_85_1","doi-asserted-by":"publisher","DOI":"10.1145\/353323.353383"},{"key":"e_1_2_1_86_1","doi-asserted-by":"publisher","DOI":"10.1109\/MWC.2007.4396943"},{"key":"e_1_2_1_87_1","doi-asserted-by":"publisher","DOI":"10.1002\/sec.1162"},{"key":"e_1_2_1_88_1","unstructured":"Trusted Computing Group TCG. 2011. TPM Main Specification Level 2 Version 1.2 Revision 116. Retrieved from http:\/\/www.trustedcomputinggroup.org\/resources\/tpm_main_specification Last accessed: 10 August 2016.  Trusted Computing Group TCG. 2011. TPM Main Specification Level 2 Version 1.2 Revision 116. Retrieved from http:\/\/www.trustedcomputinggroup.org\/resources\/tpm_main_specification Last accessed: 10 August 2016."},{"key":"e_1_2_1_89_1","doi-asserted-by":"publisher","DOI":"10.1109\/CJECE.2007.364330"},{"key":"e_1_2_1_90_1","volume-title":"Proceedings of the 59th IEEE Vehicular Technology Conference (VTC\u201904)","author":"van Hoesel Lodewijk F. W.","year":"2004"},{"key":"e_1_2_1_91_1","doi-asserted-by":"publisher","DOI":"10.1109\/PerComW.2012.6197498"},{"key":"e_1_2_1_92_1","doi-asserted-by":"publisher","DOI":"10.5555\/1298455.1298491"},{"key":"e_1_2_1_93_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.camwa.2012.06.018"},{"key":"e_1_2_1_94_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2005.2"},{"key":"e_1_2_1_95_1","doi-asserted-by":"publisher","DOI":"10.3390\/s150820799"},{"key":"e_1_2_1_96_1","doi-asserted-by":"publisher","DOI":"10.5555\/1308172.1308237"},{"key":"e_1_2_1_97_1","doi-asserted-by":"publisher","DOI":"10.1145\/1374618.1374640"},{"key":"e_1_2_1_98_1","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2010.5544307"},{"key":"e_1_2_1_99_1","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2008.4625802"}],"container-title":["ACM Computing Surveys"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2988546","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/2988546","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T03:50:41Z","timestamp":1750218641000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2988546"}},"subtitle":["A Survey"],"short-title":[],"issued":{"date-parts":[[2016,9,16]]},"references-count":97,"journal-issue":{"issue":"3","published-print":{"date-parts":[[2017,9,30]]}},"alternative-id":["10.1145\/2988546"],"URL":"https:\/\/doi.org\/10.1145\/2988546","relation":{},"ISSN":["0360-0300","1557-7341"],"issn-type":[{"value":"0360-0300","type":"print"},{"value":"1557-7341","type":"electronic"}],"subject":[],"published":{"date-parts":[[2016,9,16]]},"assertion":[{"value":"2015-12-01","order":0,"name":"received","label":"Received","group":{"name":"publication_history","label":"Publication History"}},{"value":"2016-08-01","order":1,"name":"accepted","label":"Accepted","group":{"name":"publication_history","label":"Publication History"}},{"value":"2016-09-16","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}