Esc

Peripheral Firmware Verification

D3-PFV
D3-PFV (Peripheral Firmware Verification)

Definition

Cryptographically verifying peripheral firmware integrity.

How it works

Peripherial firmware is collected and analyzed on a host either periodically or on demand. This information may be collected for future comparisons.

Changes in firmware hash values may indicate that the firmware has been tampered with or that firmware images are not maintained to current baselined versions, or even known vulnerable versions are deployed.

Considerations

  • Trust baselines will need to be generated for specific devices
  • Changes to trusted configurations will need to be managed across the enterprise
loading...
json
loading...

References

All
Patent

The following references were used to develop the Peripheral Firmware Verification knowledge-base article.

(Note: the consideration of references does not imply specific functionality exists in an offering.)

Methods and systems for hardware and firmware security monitoring

Reference Type: Patent Organization: ECLYPSIUM , Inc Author: Yuriy Bulygin, Oleksandr Bazhaniuk
Source: https://patents.google.com/patent/US20200074086A1/en

System and method for hardware-based trust control management

Reference Type: Patent Organization: Trapezoid, Inc Author: Michael J. Dyer, Jose E. Gonzalez, Albert Caballero
Source: https://patents.google.com/patent/US9674183B2/en

A knowledge graph of cybersecurity countermeasures