C-FLAT: Control-Flow Attestation for Embedded Systems Software