Secure Code Updates for Smart Embedded Devices based on PUFs

Code update is a very useful tool commonly used in low-end embedded devices to improve the existing functionalities or patch discovered bugs or vulnerabilities. If the update protocol itself is not secure, it will only bring new threats to embedded systems. Thus, a secure code update mechanism is required. However, existing solutions either rely on strong security assumptions, or result in considerable storage and computation consumption, which are not practical for resource-constrained embedded devices (e.g., in the context of Internet of Things). In this work, we propose to use intrinsic device characteristics (i.e., Physically Unclonable Functions or PUF) to design a practical and lightweight secure code update scheme. Our scheme can not only ensure the freshness, integrity, confidentiality and authenticity of code update, but also verify that the update is installed correctly on a specific device without any malicious software. Cloned or counterfeit devices can be excluded as the code update is bound to the unpredictable physical properties of underlying hardware. Legitimate devices in an untrustworthy software state can be restored by filling suspect memory with PUF-derived random numbers. After update installation, the initiator of the code update is able to obtain the verifiable software state from device, and the device can maintain a sustainable post-update secure check by enforcing a secure call sequence. To demonstrate the practicality and feasibility, we also implement the proposed scheme on a low-end MCU platform (TI MSP430) by using onboard SRAM and Flash resources

Challenges in the Development of a Thiol-Based Broad-Spectrum Inhibitor for Metallo-β-Lactamases

Pathogens, expressing metallo-β-lactamases (MBLs), become resistant against most β-lactam antibiotics. Besides the dragging search for new antibiotics, development of MBL inhibitors would be an alternative weapon against resistant bacterial pathogens. Inhibition of resistance enzymes could restore the antibacterial activity of β-lactams. Various approaches to MBL inhibitors are described; among others, the promising motif of a zinc coordinating thiol moiety is very popular. Nevertheless, since the first report of a thiol-based MBL inhibitor (thiomandelic acid) in 2001, no steps in development of thiol based MBL inhibitors were reported that go beyond clinical isolate testing. In this study, we report on the synthesis and biochemical characterization of thiol-based MBL inhibitors and highlight the challenges behind the development of thiol-based compounds, which exhibit good in vitro activity toward a broad spectrum of MBLs, selectivity against human off-targets, and reasonable activity against clinical isolates