Remote crowd attestation in a network

An apparatus, comprising:

• one or more network interfaces to communicate with a network;
• a processor coupled to the network interfaces and configured to execute one or more processes;
• and
• a memory configured to store a process executable by the processor, the process when executed configured to:
• receive information regarding a plurality of one or more nodes in the network, wherein the network is an implementation of Low-Power and Lossy Networks (LLNs);
• determine a property of the plurality of nodes based on the received information, wherein the property of the plurality of nodes comprises at least one of:
• a hardware configuration, a software configuration, a physical location, or a traffic pattern of the one or more nodes;
• observe a behavior of the plurality of nodes;
• construct a behavioral model based on the observed behavior;
• determine a degree of trustworthiness of the plurality of nodes based on the received information by comparing the determined property to the behavioral model;
• ensure a degree of trustworthiness of the observed behavior;
• and
• attest to the determined property and degree of trustworthiness of the plurality of nodes to a verification device, wherein the verification device is configured to verify the attested property and degree of trustworthiness as part of a hierarchy of attester devices in the network.

A tangible, non-transitory, computer-readable media having software encoded thereon, the software when executed by a processor configured to:

• receive information regarding plurality of nodes in the network, wherein the network is an implementation of Low-Power and Lossy Networks (LLNs);
• determine a property of the plurality of nodes based on the received information, wherein the property of the plurality of nodes comprises at least one of:
• a hardware configuration, a software configuration, a physical location, or a traffic pattern of the plurality of nodes;
• observe a behavior of the plurality of nodes;
• construct a behavioral model based on the observed behavior;
• determine a degree of trustworthiness of the plurality of nodes based on the received information by comparing the determined property to the behavioral model;
• ensure a degree of trustworthiness of the observed behavior;
• and
• attest to the determined property and degree of trustworthiness of the plurality of nodes to a verification device, wherein the verification device is configured to verify the attested property and degree of trustworthiness as part of a hierarchy of attester devices in the network.