  Modern society is getting accustomed to the Internet of Things (IoT) and
Cyber-Physical Systems (CPS) for a variety of applications that involves
security-critical user data and information transfers. In the lower end of the
spectrum, these devices are resource-constrained with no attack protection.
They become a soft target for malicious code modification attacks that steals
and misuses device data in malicious activities. The resilient system requires
continuous detection, prevention, and/or recovery and correct code execution
(including in degraded mode). By end large, existing security primitives (e.g.,
secure-boot, Remote Attestation RA, Control Flow Attestation (CFA) and Data
Flow Attestation (DFA)) focuses on detection and prevention, leaving the proof
of code execution and recovery unanswered. To this end, the proposed work
presents lightweight RARES -- Runtime Attack Resilient Embedded System design
using verified Proof-of-Execution. It presents first custom hardware control
register (Ctrl_register) based runtime memory modification attacks
classification and detection technique. It further demonstrates the Proof Of
Concept (POC) implementation of use-case-specific attacks prevention and
onboard recovery techniques. The prototype implementation on Artix 7 Field
Programmable Gate Array (FPGA) and state-of-the-art comparison demonstrates
very low (2.3%) resource overhead and efficacy of the proposed solution.
