TY - GEN A1 - Bartsch, Witali A1 - Gope, Prosanta A1 - Kavun, Elif A1 - Millwood, Owen A1 - Panchenko, Andriy A1 - Pasikhani, Aryan A1 - Polian, Ilia T1 - Design Rationale for Symbiotically Secure Key Management Systems in IoT and Beyond T2 - Proceedings of the 9th International Conference on Information Systems Security and Privacy ICISSP - Volume 1 N2 - The overwhelmingly widespread use of Internet of Things (IoT) in different application domains brought not only benefits, but, alas, security concerns as a result of the increased attack surface and vectors. One of the most critical mechanisms in IoT infrastructure is key management. This paper reflects on the problems and challenges of existing key management systems, starting with the discussion of a recent real-world attack. We identify and elaborate on the drawbacks of security primitives based purely on physical variations and – after highlighting the problems of such systems – continue on to deduce an effective and cost-efficient key management solution for IoT systems extending the symbiotic security approach in a previous work. The symbiotic architecture combines software, firmware, and hardware resources for secure IoT while avoiding the traditional scheme of static key storage and generating entropy for key material on-the-fly via a combination of a Physical Unclonable Func tion (PUF) and pseudo-random bits pre-populated in firmware. KW - Secure Processor Architecture KW - Secure IoT KW - Hardware Fingerprinting KW - PUFs KW - Attack-Resilient Hardware Y1 - 2023 SN - 978-989-758-624-8 U6 - https://doi.org/10.5220/0011726900003405 SN - 2184-4356 SP - 583 EP - 591 PB - SciTePress ER -