Survivable networks that use opportunistic devices to offload services

A non-transitory machine readable medium comprising instructions that, when executed, cause at least one processor to at least:

• in response to detection of a malware threat, enter into an auto-diagnostic mode and initiate a first message in a dedicated execution environment to trigger discovery of a candidate device to replace a service device to provide a service within a trusted network group, wherein the trusted network group is an enhanced privacy identifier (EPID) group and the dedicated execution environment is isolated from host execution instructions of the service device;
• in response to receipt of a second message from the candidate device, authenticate, in the dedicated execution environment, that the second message originates from the candidate device in the trusted network group;
• select, based on an evaluation of the candidate device with respect to the service using the second message, the candidate device to replace the service device to provide the service;
• and
• establish a connection with the candidate device to provide the service.

A method comprising:

• in response to detection of a malware threat, enter into an auto-diagnostic mode and initiate a first message in a dedicated execution environment to trigger discovery of a candidate device to replace a service device to provide a service within a trusted network group, wherein the trusted network group is an enhanced privacy identifier (EPID) group and the dedicated execution environment is isolated from host execution instructions of the service device;
• in response to receipt of a second message from the candidate device, authenticate, in the dedicated execution environment, that the second message originates from the candidate device in the trusted network group;
• selecting, by executing an instruction with at least one processor based on an evaluation of the candidate device with respect to the service using the second message, the candidate device to replace the service device to provide the service;
• and
• establishing, by executing an instruction with the at least one processor, a connection with the candidate device to provide the service.