Titlebook: Building Secure Firmware; Armoring the Foundat Jiewen Yao,Vincent Zimmer Book 2020 Jiewen Yao and Vincent Zimmer 2020 Firmware.Security.Roo

凹槽

Yet Another Task Without a Solutioncution prevention (DEP), code integrity guard (CIG), and arbitrary code guard (ACG). Address space layout randomization (ALSR) can make it harder for the attacker to predict the target address. The control flow guard (CFG) becomes more and more important today, because the control flow–based attack can bypass the fundamental hardening such as DEP.

Charlatan

Nmda-Receptor

Protein

Intellectual

Access Control as a file, a registry entry, or memory content. The typical access means to read, write, or execute. The access taxonomy also includes other actions, such as modify, create, delete, append, extend, and so on. Access control can protect the system and resources from unauthorized usage. That is also true in the firmware area.

CARE

违反

SIT

Firmware Resiliency: Detectionmay still cause the firmware component to be modified or corrupted. As such, we need to have a way to inform the Root-of-Trust for detection (RTD) to perform the integrity detection in the boot flow. The detection may happen for the mutable code and data components or just the configurable data. Sim

胶水

Firmware Resiliency: Recovery integrity, and availability. If the platform detects that the integrity of components, including code or data, is broken, the platform needs to restore the components to a known good state. This process is called recovery. It is the last element in firmware resiliency. The recovery process is a var

CLAN