Research on Attack Method of Unified Extensible Firmware Interface
2012; East China Computer Technology Research Institute; Linguagem: Inglês
ISSN
1000-3428
Autores Tópico(s)Digital and Cyber Forensics
ResumoBy analyzing framework and boot sequence of Unified Extensible Firmware Interface(UEFI),this paper finds out that UEFI does not verify its Extensible Firmware Interface(EFI) driver and EFI application and it leads to some secure problems.Three methods of attacking UEFI are proposed,including OS Loader infecting,NVRAM variable modification and EFI runtime driver injection.Analysis result shows that all of the methods can hijack the operating system kernel.
Referência(s)