{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,11]],"date-time":"2026-06-11T16:24:06Z","timestamp":1781195046388,"version":"3.54.1"},"reference-count":30,"publisher":"Association for Computing Machinery (ACM)","issue":"5","license":[{"start":{"date-parts":[[2023,9,26]],"date-time":"2023-09-26T00:00:00Z","timestamp":1695686400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["ACM Trans. Embed. Comput. Syst."],"published-print":{"date-parts":[[2023,9,30]]},"abstract":"<jats:p>Remote attestation is a method used in distributed systems to detect integrity violations on a target device (prover) through a challenge\u2013response protocol initiated by a verifier device. The prover calculates a hash of its memory, which is compared to a known good state hash by the verifier. We propose a novel technique, called Counters Help Against Roving Malware (CHARM), which uses hardware performance counters on the prover\u2019s side and machine learning on the verifier\u2019s side to make interruptible remote attestation feasible, even for constrained microcontrollers. We will demonstrate the effectiveness of various machine learning tools and data manipulation techniques on prediction accuracy in a variety of scenarios.<\/jats:p>","DOI":"10.1145\/3611674","type":"journal-article","created":{"date-parts":[[2023,7,31]],"date-time":"2023-07-31T12:09:47Z","timestamp":1690805387000},"page":"1-19","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":4,"title":["Interruptible Remote Attestation of Low-end IoT Microcontrollers via Performance Counters"],"prefix":"10.1145","volume":"22","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-4745-5374","authenticated-orcid":false,"given":"Davide","family":"Li Calsi","sequence":"first","affiliation":[{"name":"Chair of Theoretical Information Technology, Technical University of Munich (TUM), Munich, Germany, Germany"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5685-9795","authenticated-orcid":false,"given":"Vittorio","family":"Zaccaria","sequence":"additional","affiliation":[{"name":"DEIB, Politecnico di Milano, Milano, Italy, Italy"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2023,9,26]]},"reference":[{"key":"e_1_3_2_2_2","unstructured":"FreeRTOS\u2019 online documentation. Retrieved from https:\/\/www.freertos.org\/a00125.html"},{"key":"e_1_3_2_3_2","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2020.2983655"},{"key":"e_1_3_2_4_2","doi-asserted-by":"crossref","unstructured":"Moreno Ambrosin Mauro Conti Riccardo Lazzeretti Md Masoom Rabbani and Silvio Ranise. 2018. PADS: Practical attestation for highly dynamic swarm topologies. arXiv:1806.05766. Retrieved from http:\/\/arxiv.org\/abs\/1806.05766","DOI":"10.1109\/SIoT.2018.00009"},{"key":"e_1_3_2_5_2","doi-asserted-by":"crossref","first-page":"119","DOI":"10.1007\/978-3-642-38980-1_8","volume-title":"Applied Cryptography and Network Security","author":"Aumasson Jean-Philippe","year":"2013","unstructured":"Jean-Philippe Aumasson, Samuel Neves, Zooko Wilcox-O\u2019Hearn, and Christian Winnerlein. 2013. BLAKE2: Simpler, smaller, fast as MD5. In Applied Cryptography and Network Security. Springer, Berlin, 119\u2013135."},{"key":"e_1_3_2_6_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICCKE.2014.6993402"},{"key":"e_1_3_2_7_2","unstructured":"Alexander Sprog\u00f8 Banks Marek Kisiel and Philip Korsholm. 2021. Remote attestation: A literature review. arXiv:2105.02466. Retrieved from https:\/\/arxiv.org\/abs\/2105.02466"},{"key":"e_1_3_2_8_2","doi-asserted-by":"publisher","DOI":"10.1145\/2744769.2744922"},{"key":"e_1_3_2_9_2","doi-asserted-by":"publisher","DOI":"10.1145\/3052973.3053010"},{"key":"e_1_3_2_10_2","doi-asserted-by":"publisher","DOI":"10.1145\/3196494.3196526"},{"key":"e_1_3_2_11_2","doi-asserted-by":"publisher","DOI":"10.1109\/HST.2018.8383885"},{"key":"e_1_3_2_12_2","doi-asserted-by":"publisher","DOI":"10.1145\/1653662.1653711"},{"key":"e_1_3_2_13_2","doi-asserted-by":"publisher","DOI":"10.1145\/3489517.3530550"},{"key":"e_1_3_2_14_2","volume-title":"Proceedings of the 28th USENIX Security Symposium","author":"Nunes Ivan De Oliveira","year":"2019","unstructured":"Ivan De Oliveira Nunes, Karim Eldefrawy, Norrathep Rattanavipanon, Michael Steiner, and Gene Tsudik. 2019. VRASED: A verified hardware\/software co-design for remote attestation. In Proceedings of the 28th USENIX Security Symposium."},{"key":"e_1_3_2_15_2","doi-asserted-by":"publisher","DOI":"10.1145\/3240765.3240821"},{"key":"e_1_3_2_16_2","doi-asserted-by":"crossref","unstructured":"Karim Eldefrawy Norrathep Rattanavipanon and Gene Tsudik. 2017. HYDRA: HYbrid design for remote attestation (using a formally verified microkernel). arXiv:1703.02688. Retrieved from http:\/\/arxiv.org\/abs\/1703.02688","DOI":"10.1145\/3098243.3098261"},{"key":"e_1_3_2_17_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2020.101945"},{"key":"e_1_3_2_18_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.jns.2019.04.011"},{"key":"e_1_3_2_19_1","unstructured":"MalwareBazaar. [n. d.]. Malware samples for ARM 32-bit microcontrollers. https:\/\/bazaar.abuse.ch\/sample\/5f59b930fabf90bf48106e4cd778c21f88a51cbe12d60062bee54f51998b16ad\/ https:\/\/bazaar.abuse.ch\/sample\/80415d67fa20f3b053a155da702e8b934e83dbaaf6119e06fa5f6cd1e66b0b20\/ https:\/\/bazaar.abuse.ch\/sample\/dd1bb83aab0ab77cbccd54bd72bfc64baaa4aea86bae4b7adbd684743dbdbee5\/"},{"key":"e_1_3_2_20_2","unstructured":"Antonio Joia Neto and Ivan de Oliveira Nunes. 2023. ISC-FLAT: On the conflict between control flow attestation and real-time operations. arxiv:2303.03561 [cs.CR]. Retrieved from https:\/\/arxiv.org\/abs\/2303.03561"},{"key":"e_1_3_2_21_1","article-title":"Sampling Rates in a Weather Monitor","author":"Station Pacific Marine Enviromental Laboratory OCS: Ocean Climate","unstructured":"Pacific Marine Enviromental Laboratory OCS: Ocean Climate Station. [n. d.]. Sampling Rates in a Weather Monitor. Retrieved from https:\/\/www.pmel.noaa.gov\/ocs\/sampling-rates","journal-title":"https:\/\/www.pmel.noaa.gov\/ocs\/sampling-rates"},{"key":"e_1_3_2_22_2","doi-asserted-by":"publisher","DOI":"10.23919\/DATE51398.2021.9474050"},{"key":"e_1_3_2_23_2","doi-asserted-by":"publisher","DOI":"10.1145\/3291047"},{"key":"e_1_3_2_24_2","volume-title":"Proceedings of the 11th International Conference on Security, Privacy and Applied Cryptographic Engineering (SPACE\u201921)","author":"Rosso Martin","year":"2021","unstructured":"Martin Rosso, Joost Renes, Nikita Veshchikov, Eduardo Alvarenga, and Jerry den Hartog. 2021. Actionable malware classification in embedded environments using hardware performance counters. In Proceedings of the 11th International Conference on Security, Privacy and Applied Cryptographic Engineering (SPACE\u201921). Conference date: 10-12-2021 Through 13-12-2021. https:\/\/cse.iitkgp.ac.in\/conf\/SPACE2021\/"},{"key":"e_1_3_2_25_2","doi-asserted-by":"publisher","DOI":"10.1109\/SECPRI.2004.1301329"},{"key":"e_1_3_2_26_2","unstructured":"ST Microelectronics 2020. Datasheet-STM32L552xx . Retrieved from https:\/\/www.st.com\/resource\/en\/datasheet\/stm32l552cc.pdf"},{"key":"e_1_3_2_27_2","doi-asserted-by":"publisher","DOI":"10.3389\/frobt.2020.00071"},{"key":"e_1_3_2_28_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICCAD.2015.7372617"},{"key":"e_1_3_2_29_2","doi-asserted-by":"publisher","DOI":"10.1145\/3196494.3196515"},{"key":"e_1_3_2_30_2","doi-asserted-by":"publisher","DOI":"10.1145\/3196494.3196515"},{"key":"e_1_3_2_31_2","doi-asserted-by":"publisher","DOI":"10.1109\/MDAT.2021.3063338"}],"container-title":["ACM Transactions on Embedded Computing Systems"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3611674","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3611674","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T16:37:08Z","timestamp":1750178228000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3611674"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,9,26]]},"references-count":30,"journal-issue":{"issue":"5","published-print":{"date-parts":[[2023,9,30]]}},"alternative-id":["10.1145\/3611674"],"URL":"https:\/\/doi.org\/10.1145\/3611674","relation":{},"ISSN":["1539-9087","1558-3465"],"issn-type":[{"value":"1539-9087","type":"print"},{"value":"1558-3465","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,9,26]]},"assertion":[{"value":"2023-03-16","order":0,"name":"received","label":"Received","group":{"name":"publication_history","label":"Publication History"}},{"value":"2023-07-20","order":1,"name":"accepted","label":"Accepted","group":{"name":"publication_history","label":"Publication History"}},{"value":"2023-09-26","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}