Cross-platform Open Security Stack for Connected Devices

Informazioni relative al progetto

CROSSCON

ID dell’accordo di sovvenzione: 101070537

DOI

10.3030/101070537

Data della firma CE 22 Giugno 2022

Data di avvio 1 Novembre 2022

Data di completamento 31 Ottobre 2025

Finanziato da

• Civil Security for Society

Costo totale

€ 4 603 206,25

Contributo UE

€ 4 603 206,00

Coordinato da

ATOS IT SOLUTIONS AND SERVICES IBERIA SL
Spain

CORDIS fornisce collegamenti ai risultati finali pubblici e alle pubblicazioni dei progetti ORIZZONTE.

I link ai risultati e alle pubblicazioni dei progetti del 7° PQ, così come i link ad alcuni tipi di risultati specifici come dataset e software, sono recuperati dinamicamente da .OpenAIRE .

Risultati finali

Documents, reports (10)

Use Cases Definition Final Version

Extended description of use cases and scenarios including technical diagrams and specification of all scenarios’ components, security services, settings (T1.1).

Validation Criteria Initial Version

Presents the identified validation criteria for the CROSSCON IoT stack (T1.3).

CROSSCON Open Security Stack Documentation - Draft

A report on first research and development results of the CROSSCON stack components across tasks T3.1 to T3.5.

Requirements Elicitation Final Technical Specification

Second and final specification of CROSSCON IoT stack requirement elicitation based on technical and end users’ feedback (T1.2).

Use Cases Definition Initial Version

First version of use cases and scenarios definition including architecture, infrastructure, security services, and stakeholders’ relation (T1.1).

Requirements Elicitation Initial Technical Specification

First version of requirement elicitation for the CROSSCON IoT security stack (T1.2).

Dissemination and Communication Plan

A detailed plan for dissemination and communication of project results including stakeholders’ engagement plan and online channels development (T6.1).

Project Website

A report on the Website created, its layout, structure, and content management (T6.1).

CROSSCON Extensions to Domain Specific Hardware Architectures Documentation - Draft

A report of the first research and development results of the CROSSCON hardware/software extension primitives, algorithms and APIs for domain specific hardware architectures (T4.1, T4.2, T4.3).

Dissemination, Communication and Community Building First Report

A report on the dissemination and communication, stakeholders’ engagement, advisory board, and training activities for the first half of the project (T6.1, T6.3, T6.4).

Data Management Plan (1)

Data Management Plan

A report describing the project’s data management plan, ethics and gender policy (T7.4).

Other (4)

CROSSCON Open Specification - Draft

A document with code and diagrams describing the initial version of the developed Open Specification and HW/SW co-design (T2.1,T2.3).

CROSSCON Open Security Stack - Initial Version

Software, technical diagrams and algorithms of experimental proof of concept of the CROSSCON stack components developed across tasks T3.1 to T3.5. TRL 3.

CROSSCON Extension Primitives to Domain Specific Hardware Architectures - Initial Version

Development board FPGA implementation of hardware/software extension primitives complemented with technical diagrams of the initial versions, experimental proof of concept, of the CROSSCON extension primitives and mechanisms developed across tasks T4.1, T4.2, and T4.3. TRL 3.

CROSSCON Formal Framework - Draft

A document with code, diagrams, repositories describing the initial formal framework and the developed/adapted tools (T2.2).

Pubblicazioni

Conference proceedings (17)

Securing Embedded and IoT Systems with SPMP-based Virtualization

Autori: Sandro Pinto, José Martins, Manuel Rodriguez, Tilen Nedanovski, Ziga Putrle, Matjaz Breskvar
Pubblicato in: RISC-V Summit Europe 2024, 2024
Editore: RISC-V Summit Europe 2024

WhisperFuzz: White-Box Fuzzing for Detecting and Locating Timing Vulnerabilities in Processors

Autori: Pallavi Borkar, Chen Chen, Mohamadreza Rostami, Nikhilesh Singh, Rahul Kande, Ahmad-Reza Sadeghi, Chester Rebeiro, Jeyavijayan Rajendran
Pubblicato in: USENIX, 2024
Editore: USENIX

μIPS: Software-Based Intrusion Prevention for Bare-Metal Embedded Systems

Autori: Luca Degani , Majid Salehi , Fabio Martinelli, Bruno Crispo
Pubblicato in: ESORICS 2023, 2023
Editore: Springer-Verlag
DOI: 10.1007/978-3-031-51482-1_16

BUSted!!! Microarchitectural Side-Channel Attacks on the MCU Bus Interconnect

Autori: Cristiano Rodrigues, Daniel Oliveira, Sandro Pinto
Pubblicato in: 2024 IEEE Symposium on Security and Privacy (SP), 2024, ISSN 2375-1207
Editore: IEEE Computer Society
DOI: 10.1109/SP54263.2024.00062

CROSSCON: Interoperable IoT Security Stack - The RISC-V Opportunity

Autori: Sandro Pinto, Matjaz Breskvar, Tiago Gomes, Hristo Koshutanski, Aljosa Pasic, Piotr Król, Emna Amri, David Purón, Zoltan Hornak, Marco Roveri, Alexandra Dmitrienko, Ahmad-Reza Sadeghi, Bruno Crispo
Pubblicato in: RISC-V Europe Summit 2023, 2023
Editore: RISC-V Europe Summit

Lost and Found in Speculation: Hybrid Speculative Vulnerability Detection

Autori: Mohamadreza Rostami,Shaza Zeitouni,Rahul Kande, Chen Chen, Pouya Mahmoody, Jeyavijayan Rajendran, Ahmad-Reza Sadeghi
Pubblicato in: Design Automation Conference, 2024, 2024
Editore: Design Automation Conference

One for All and All for One: GNN-based Control-Flow Attestation for Embedded Devices

Autori: Marco Chilese,Richard Mitev,Meni Orenbach, Robert Thorburn, Ahmad Atamli, Ahmad-Reza Sadeghi
Pubblicato in: 2024 IEEE Symposium on Security and Privacy (SP), 2024, ISSN 2375-1207
Editore: IEEE Computer Society
DOI: 10.1109/SP54263.2024.00182

AppBox: A Black-Box Application Sandboxing Technique for Mobile App Management Solutions

Autori: Maqsood Ahmad, Francesco Bergadano, Valerio Costamagna, Bruno Crispo, Giovanni Russello
Pubblicato in: IEEE Symposium on Computers and Communications (ISCC), 2023, ISSN 2642-7389
Editore: IEEE
DOI: 10.1109/ISCC58397.2023.10217861

The Nonce-nce of Web Security: an Investigation of CSP Nonces Reuse

Autori: Matteo Golinelli; Francesco Bonomi; Bruno Crispo
Pubblicato in: Computer Security. ESORICS 2023 International Workshops, 2023, ISBN 978-3-031-54129-2
Editore: Springer Nature Switzerland
DOI: 10.1007/978-3-031-54129-2_27

Beyond random inputs: A novel ML-based hardware fuzzing

Autori: Mohamadreza Rostami, Marco Chilese, Shaza Zeitouni, Rahul Kande, Jeyavijayan Rajendran, Ahmad-Reza Sadeghi
Pubblicato in: IEEE Design, Automation and Test in Europe Conference (DATE), 2024
Editore: IEEE Design, Automation and Test in Europe

Cyber-physical metropolitan area digital substations test bench for evaluating intrusion detection systems

Autori: Santiago Sanchez-Acevedo, Tesfaye Amare Zerihun, Hristo Koshutanski, Alejandro Garcia-Bedoya
Pubblicato in: IEEE GPECOM 2024, 2024
Editore: IEEE GPECOM 2024
DOI: 10.36227/techrxiv.171778519.94792591/v1

Efficient and Safe I/O Operations for Intermittent Systems

Autori: Eren Yıldız, Saad Ahmed, Bashima Islam, Josiah Hester, Kasım Sinan Yıldırım
Pubblicato in: EuroSys: European Conference on Computer Systems, 2023, ISBN 9781450394871
Editore: Association for Computing Machinery
DOI: 10.1145/3552326.3587435

PUF-based Authentication in IoT against Strong Physical Adversary using Zero-Knowledge Proofs

Autori: Lukas Petzi, Alexandra Dmitrienko, Ivan Visconti
Pubblicato in: SafeThings 2024, 2024
Editore: SafeThings

Device Behavioral Profiling for Autonomous Protection Using Deep Neural Networks

Autori: Sandeep Gupta, Bruno Crispo
Pubblicato in: 2023 IEEE Symposium on Computers and Communications (ISCC), 2023
Editore: IEEE Computer Society
DOI: 10.1109/ISCC58397.2023.10218275

Shedding Light on Static Partitioning Hypervisors for Arm-based Mixed-Criticality Systems

Autori: Martins, José; Pinto, Sandro
Pubblicato in: 2023 IEEE 29th Real-Time and Embedded Technology and Applications Symposium (RTAS), 2023, ISSN 2642-7346
Editore: IEEE Computer Society
DOI: 10.1109/rtas58335.2023.00011

CROSSCON: Interoperable IoT Security Stack for Embedded Connected Devices

Autori: Sandro Pinto, Matjaz Breskvar, Tiago Gomes, Hristo Koshutanski, Aljosa Pasic, Piotr Król, Emna Amri, David Purón, Zoltan Hornak, Marco Roveri, Alexandra Dmitrienko, Ahmad-Reza Sadeghi, Bruno Crispo
Pubblicato in: Embbeded World 2024, 2024
Editore: Embbeded World Exhibition&Conference

FreqFed: A Frequency Analysis-Based Approach for Mitigating Poisoning Attacks in Federated Learning

Autori: Fereidooni, Hossein; Pegoraro, Alessandro; Rieger, Phillip; Dmitrienko, Alexandra; Sadeghi, Ahmad-Reza
Pubblicato in: Network and Distributed System Security (NDSS) Symposium, 2024
Editore: Network and Distributed System Security (NDSS) Symposium
DOI: 10.48550/arxiv.2312.04432

Peer reviewed articles (3)

Marionette: Manipulate Your Touchscreen via A Charging Cable

Autori: Yan Jiang, Xiaoyu Ji,Kai Wang,Chen Yan, Richard Mitev, Ahmad-Reza Sadeghi, Wenyuan Xu
Pubblicato in: IEEE Transactions on Dependable and Secure Computing, 2023, ISSN 1941-0018
Editore: IEEE Computer Society
DOI: 10.1109/TDSC.2023.3326181

CryptojackingTrap: An Evasion Resilient Nature-Inspired Algorithm to Detect Cryptojacking Malware

Autori: Atefeh Zareh Chahoki; Hamid Reza Shahriari; Marco Roveri
Pubblicato in: IEEE Transactions on Information Forensics and Security, 2024, ISSN 1556-6021
Editore: IEEE Transactions on Information Forensics and Security
DOI: 10.21227/kwh4-0g27

HSP-V: Hypervisor-less Static Partitioning for RISC-V COTS Platforms

Autori: João Sousa; José Martins; Tiago Gomes; Sandro Pinto
Pubblicato in: IEEE Access, 2024, ISSN 2169-3536
Editore: IEEE Access
DOI: 10.1109/ACCESS.2024.3399601

Other (1)

CROSSCON: Cross-platform Open Security Stack for Connected Devices

Autori: Bruno Crispo, Marco Roveri; Sandro Pinto, Tiago Gomes; Aljosa Pasic; Akos Milankovich; David Purón, Ainara Garcia; Ziga Putrle; Peter Ten; Malvina Catalano
Pubblicato in: 2024
Editore: CROSSCON Project