Artigo Revisado por pares

Research of Malicious Code Defense Technology Based on UEFI Firmware

2012; East China Computer Technology Research Institute; Linguagem: Inglês

ISSN

1000-3428

Autores

FU Si-yuan,

Tópico(s)

Digital and Cyber Forensics

Resumo

Unified Extensible Firmware Interface(UEFI) faces a grim challenges of malicious code attack.The traditional computer security software can not provide security for the firmware and operating system boot process.In order to solve the problem,this paper designs a malicious code defense system based on UEFI firmware.By using the multi-pattern matching algorithm,a signature detecting engine under UEFI environment is implemented,which provides functionally of malicious code detect,boot option analysis and firmware and operating system kernel backup.Experimental results prove that the system can effectively resist malicious code with small code size and low costs to meet the firmware's need of flash size and fast boot.

Referência(s)