Evil Maid Just Got Angrier - Why Full-Disk Encryption ... - CanSecWest

More documents

Recommendations

Info

Acknowledgements / Greetings CSW organizers and review board ASUS for openly working with us on mitigations apebit, Kirk Brannock, chopin, doughty, Efi, Laplinker, Lelia, Dhinesh Manoharan, Misha, Bruce Monroe, Monty, Nick, Brian Payne, rfp, secoeites, sharkey, toby, Vincent And many others whom I deeply respect Graphics from http://www.deviantart.com
Further Reading 1 Evil Maid goes after TrueCrypt! by Alex Tereshkin and Joanna Rutkowska 2 Attacking the BitLocker Boot Process by Sven Turpe et al. 3 Anti Evil Maid by Joanna Rutkowska 4 Go Deep Into The Security of Firmware Update by Sun Bing 5 Persistent BIOS Infection by Anibal Sacco and Alfredo Ortega 6 Hardware Backdooring is Practical by Jonathan Brossard 7 Mac EFI Rootkits by snare 8 Real SMM Rootkit: Reversing and Hooking BIOS SMI Handlers by core collapse 9 New Breed of Stealthy Rootkits by Shawn Embelton and Sherry Sparks 10 Attacking Intel BIOS by Rafal Wojtczuk and Alexander Tereshkin 11 Firmware Rootkits: The Threat to The Enterprise by John Heasman 12 Implementing and Detecting an ACPI BIOS Rootkit by John Heasman 13 BIOS Boot Hijacking by Sun Bing 14 Mebromi 15 BIOS RootKit: Welcome Home, My Lord by IceLord 16 Hardware Involved Software Attacks by Jeff Forristal 17 Beyond BIOS by Vincent Zimmer 18 http://archives.neohapsis.com/archives/bugtraq/2009-08/0059.html
Page 1:
Evil Maid Just Got Angrier Why Full
Page 4 and 5:
Outline 1 UEFI BIOS 2 Measured/Trus
Page 6 and 7:
Page 8 and 9:
Page 10 and 11:
Page 12 and 13:
Legacy BIOS CPU Reset vector in ROM
Page 14 and 15:
Legacy BIOS CPU Reset vector in ROM
Page 16 and 17:
Security of Legacy BIOS Huh?
Page 18 and 19:
Unified Extensible Firmware Interfa
Page 20 and 21:
So is UEFI BIOS secure? UEFI specif
Page 22 and 23:
Page 24 and 25:
Windows BitLocker http://technet.mi
Page 26 and 27:
Typical Chain of Measurements
Page 28 and 29:
Typical Chain of Measurements ⊗ I
Page 30 and 31:
Page 32 and 33:
Page 34 and 35:
Page 36 and 37:
Page 38 and 39: Typical Chain of Measurements ⊗ I
Page 40 and 41: Typical Chain of Measurements ⊗ I
Page 42 and 43: Outline 1 UEFI BIOS 2 Measured/Trus
Page 44 and 45: The Problem Startup UEFI BIOS firmw
Page 46 and 47: The Solution is Simple Just let Bit
Page 54 and 55: SPI Flash / BIOS Protections 1 Writ
Page 56 and 57: SPI Protected Range Registers http:
Page 60 and 61: Hey! We’ve Succeeded!
Page 62 and 63: NIST BIOS Protection Guidelines Rec
Page 64 and 65: UEFI Updates Aren’t Exactly Signe
Page 69 and 70: Angry Evil Maid Attack Outline Agai
Page 71 and 72: The Original Boot Block
Page 73 and 74: Writing Payload to Early BIOS in SP
Page 75 and 76: But That P67 Board Is Just Too Old
Page 77 and 78: ASUS P8Z77-V PRO Yes! UEFI BIOS upd
Page 79 and 80: Demo The problem applies to any Ful
Page 81 and 82: What About Secure Boot? UEFI 2.3.1
Page 83 and 84: Outline 1 UEFI BIOS 2 Measured/Trus
Page 85 and 86: BIOS Rootkits BIOS Rootkit [5,6,7,1
Page 87: Anything We Can Do? If you care abo
show all

Evil Maid Just Got Angrier - Why Full-Disk Encryption ... - CanSecWest

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?