{"id":{"repo_id":"uiuc","oai_identifier":"oai:www.ideals.illinois.edu:2142/124429"},"canonical_url":"https://search.dev.ndltd.org/etd/uiuc/oai:www.ideals.illinois.edu:2142/124429","repository":{"repo_id":"uiuc","name":"University of Illinois - Urbana-Champaign","base_url":"https://www.ideals.illinois.edu/oai-pmh"},"display":{"title":"DPU-LARK: DPU-leveraged attestation of remote kernels for securing OT networks","abstract":"Submission original under an indefinite embargo labeled 'Open Access'. The submission was exported from vireo on 2024-09-16 without embargo terms","abstract_html":"Submission original under an indefinite embargo labeled 'Open Access'. The submission was exported from vireo on 2024-09-16 without embargo terms","abstract_has_math":false,"creators":["Kozlowski, William"],"institution":"University of Illinois at Urbana-Champaign","degree_name":"M.S.","degree_level":"Thesis","degree_discipline":"Electrical & Computer Engr","degree_department":null,"school":null,"contributors":["Chen, Deming"],"advisors":[],"committee_chairs":[],"committee_members":[],"year":2024,"date_issued":"2024-05","date_published":"2024-05","updated_at":"2026-07-22T22:25:00Z","subjects":["Cyber Security","Attestation","Critical Infrastructure Security","Smartnic"],"languages":["en","eng"],"rights":["Copyright 2024 William Kozlowski"],"rights_urls":[],"identifier_entries":[]},"links":{"outbound_url":"https://hdl.handle.net/2142/124429","outbound_label":"Handle","outbound_source":"dc:identifier"},"metadata_groups":[{"id":"people","label":"People","entries":[{"key":"dc:contributor","label":"Contributor","values":["Chen, Deming"]},{"key":"dc:creator","label":"Author","values":["Kozlowski, William"]}]},{"id":"academic_context","label":"Academic Context","entries":[{"key":"dc:date","label":"Dc Date","values":["2024-05","2024-05-03"]},{"key":"dc:type","label":"Dc Type","values":["text"]},{"key":"thesis:degree_discipline","label":"Discipline","values":["Electrical & Computer Engr"]},{"key":"thesis:degree_level","label":"Degree Level","values":["Thesis"]},{"key":"thesis:degree_name","label":"Degree Name","values":["M.S."]},{"key":"thesis:institution_name","label":"Thesis Institution Name","values":["University of Illinois at Urbana-Champaign"]}]},{"id":"subjects_keywords","label":"Subjects and Keywords","entries":[{"key":"dc:subject","label":"Dc Subject","values":["Cyber Security","Attestation","Critical Infrastructure Security","Smartnic"]}]},{"id":"language_rights","label":"Language and Rights","entries":[{"key":"dc:language","label":"Dc Language","values":["en","eng"]},{"key":"dc:rights","label":"Dc Rights","values":["Copyright 2024 William Kozlowski"]}]},{"id":"identifiers","label":"Identifiers","entries":[{"key":"dc:identifier","label":"Identifier","values":["https://hdl.handle.net/2142/124429"]}]},{"id":"additional","label":"Additional Metadata","entries":[{"key":"dc:description","label":"Description","values":["Submission original under an indefinite embargo labeled 'Open Access'. The submission was exported from vireo on 2024-09-16 without embargo terms","The student, William Kozlowski, accepted the attached license on 2024-04-28 at 16:47.","The student, William Kozlowski, submitted this Thesis for approval on 2024-05-03 at 14:54.","This Thesis was approved for publication on 2024-05-03 at 15:47.","DSpace SAF Submission Ingestion Package generated from Vireo submission #20684 on 2024-09-16 at 00:37:20","It is widely recognized that critical infrastructures of nations present a significant and lucrative target for cyber-attacks and threat actors. With numerous real-world examples, such as the attack on the Ukranian power grid in 2015 which caused 225,000 customers to go without power, the need to secure the networks of such systems is more important than ever. This study aims to examine the efficacy of using a smart-NIC, such as the Bluefield-2 DPU, as a solution to enable greater cyber-security in the Smart Grid and other operational technology networks. While studies have been conducted to introduce remote attestation to OT networks, they fail to consider high-speed performance. Presented here is DPU-LARK, the first remote attestation scheme which considers message latency for common OT network messaging protocols. It tests the performance of this scheme using a Bluefield-2 DPU as a verifier, and compares them to solutions using a CPU alone. It also evaluates the performance of the scheme on low-power prover devices (micro-controllers) to determine the effect of the construction on latency, availability, memory, and network traffic. It finds that the DPU is able to outperform expensive, server-grade CPU’s with relevant hardware acceleration for high prover counts by up to 1.7x, and match performance at lower counts with much lighter cost. For CPU’s without acceleration, the DPU surpasses their performance by 11x-22x. Furthermore, under typical circumstances, DPU-LARK offers 99.9% availability for a 33s attestation period. Furthermore, message validation latency is negligible whenever a device is available."]},{"key":"dc:format","label":"Dc Format","values":["application/pdf"]},{"key":"dc:title","label":"Title","values":["DPU-LARK: DPU-leveraged attestation of remote kernels for securing OT networks"]}]}],"canonical_facts":{"dc:contributor":["Chen, Deming"],"dc:creator":["Kozlowski, William"],"dc:date":["2024-05","2024-05-03"],"dc:description":["Submission original under an indefinite embargo labeled 'Open Access'. The submission was exported from vireo on 2024-09-16 without embargo terms","The student, William Kozlowski, accepted the attached license on 2024-04-28 at 16:47.","The student, William Kozlowski, submitted this Thesis for approval on 2024-05-03 at 14:54.","This Thesis was approved for publication on 2024-05-03 at 15:47.","DSpace SAF Submission Ingestion Package generated from Vireo submission #20684 on 2024-09-16 at 00:37:20","It is widely recognized that critical infrastructures of nations present a significant and lucrative target for cyber-attacks and threat actors. With numerous real-world examples, such as the attack on the Ukranian power grid in 2015 which caused 225,000 customers to go without power, the need to secure the networks of such systems is more important than ever. This study aims to examine the efficacy of using a smart-NIC, such as the Bluefield-2 DPU, as a solution to enable greater cyber-security in the Smart Grid and other operational technology networks. While studies have been conducted to introduce remote attestation to OT networks, they fail to consider high-speed performance. Presented here is DPU-LARK, the first remote attestation scheme which considers message latency for common OT network messaging protocols. It tests the performance of this scheme using a Bluefield-2 DPU as a verifier, and compares them to solutions using a CPU alone. It also evaluates the performance of the scheme on low-power prover devices (micro-controllers) to determine the effect of the construction on latency, availability, memory, and network traffic. It finds that the DPU is able to outperform expensive, server-grade CPU’s with relevant hardware acceleration for high prover counts by up to 1.7x, and match performance at lower counts with much lighter cost. For CPU’s without acceleration, the DPU surpasses their performance by 11x-22x. Furthermore, under typical circumstances, DPU-LARK offers 99.9% availability for a 33s attestation period. Furthermore, message validation latency is negligible whenever a device is available."],"dc:format":["application/pdf"],"dc:identifier":["https://hdl.handle.net/2142/124429"],"dc:language":["en","eng"],"dc:rights":["Copyright 2024 William Kozlowski"],"dc:subject":["Cyber Security","Attestation","Critical Infrastructure Security","Smartnic"],"dc:title":["DPU-LARK: DPU-leveraged attestation of remote kernels for securing OT networks"],"dc:type":["text"],"thesis:degree_discipline":["Electrical & Computer Engr"],"thesis:degree_level":["Thesis"],"thesis:degree_name":["M.S."],"thesis:institution_name":["University of Illinois at Urbana-Champaign"]},"updated_at":"2026-07-22T22:25:00Z"}