Sciweavers

Free Online Productivity Tools i2Speak i2Symbol i2OCR iTex2Img iWeb2Print iWeb2Shot i2Type iPdf2Split iPdf2Merge i2Bopomofo i2Arabic i2Style i2Image i2PDF iLatex2Rtf Sci2ools

9

ACSAC
2002
IEEE

favoriteEmaildiscussreport

101views Security Privacy» more ACSAC 2002»

Malicious Code Detection for Open Firmware

13 years 9 months ago

Malicious Code Detection for Open Firmware

Download www.cs.cornell.edu

Malicious boot ﬁrmware is a largely unrecognized but signiﬁcant security risk to our global information infrastructure. Since boot ﬁrmware executes before the operating system is loaded, it can easily circumvent any operating system-based security mechanism. Boot ﬁrmware programs are typically written by third-party device manufacturers and may come from various suppliers of unknown origin. In this paper we describe an approach to this problem based on load-time veriﬁcation of onboard device drivers against a standard security policy designed to limit access to system resources. We also describe our ongoing effort to construct a prototype of this technique for Open Firmware boot platforms.

Frank Adelstein, Matthew Stillerman, Dexter Kozen

Real-time Traffic

ACSAC 2002 | Boot ﬁrmware | Boot ﬁrmware Executes | Malicious Boot ﬁrmware | Security Privacy |

claim paper

Related Content

» Learning to Detect and Classify Malicious Executables in the Wild

» Program analysis for bug detection using parfait invited talk

» Manufacturing opaque predicates in distributed systems for code obfuscation

» ARCHER using symbolic pathsensitive analysis to detect memory access errors

» Memsherlock an automated debugger for unknown memory corruption vulnerabilities

» Automatic detection of unsafe component loadings

» HyperSentry enabling stealthy incontext measurement of hypervisor integrity

» Addressing Mobile Agent Security through Agent Collaboration

Post Info
More Details (n/a)

Added	14 Jul 2010
Updated	14 Jul 2010
Type	Conference
Year	2002
Where	ACSAC
Authors	Frank Adelstein, Matthew Stillerman, Dexter Kozen

Comments (0)