You are required to read and agree to the below before accessing a full-text version of an article in the IDE article repository.

The full-text document you are about to access is subject to national and international copyright laws. In most cases (but not necessarily all) the consequence is that personal use is allowed given that the copyright owner is duly acknowledged and respected. All other use (typically) require an explicit permission (often in writing) by the copyright owner.

For the reports in this repository we specifically note that

  • the use of articles under IEEE copyright is governed by the IEEE copyright policy (available at http://www.ieee.org/web/publications/rights/copyrightpolicy.html)
  • the use of articles under ACM copyright is governed by the ACM copyright policy (available at http://www.acm.org/pubs/copyright_policy/)
  • technical reports and other articles issued by M‰lardalen University is free for personal use. For other use, the explicit consent of the authors is required
  • in other cases, please contact the copyright owner for detailed information

By accepting I agree to acknowledge and respect the rights of the copyright owner of the document I am about to access.

If you are in doubt, feel free to contact webmaster@ide.mdh.se

Remote Attestation for Secure Industrial Device Onboarding

Fulltext:


Authors:

Volodymyr Trykoz, Björn Leander, Saad Mubeen, Mohammad Ashjaei

Publication Type:

Conference/Workshop Paper

Venue:

The 45th International Conference on Computer Safety, Reliability and Security

Abstract

Security in industrial automation systems becomes more complicated as industry moves toward modern and flexible solutions such as modular automation and increased vendor diversity. Attack surfaces grow as more network interfaces are added and more devices become exposed to the internet and cloud. The rapid introduction and replacement of devices make it difficult to track vulnerabilities and ensure nothing malicious enters the system. Hence, trusting a device prior to its onboarding becomes critical for ensuring the overall security and safety of the system. This paper proposes a remote attestation mechanism for the onboarding process which follows the Remote ATtestation ProcedureS proposals. In order to provide evidence for the applicability of the proposed process, we provide a reference implementation. Moreover, we provide a security analysis of the proposed solution in the form of a threat model.

Bibtex

@inproceedings{Trykoz7420,
author = {Volodymyr Trykoz and Bj{\"o}rn Leander and Saad Mubeen and Mohammad Ashjaei},
title = {Remote Attestation for Secure Industrial Device Onboarding},
month = {September},
year = {2026},
booktitle = { The 45th International Conference on Computer Safety, Reliability and Security },
url = {http://www.es.mdu.se/publications/7420-}
}