You've Already Been Hacked: What if There Is a Backdoor in Your UEFI OROM?
Analysts investigate attack surfaces and defenses concerning You've Already Been Hacked: What if There Is a Backdoor in Your UEFI OROM?.
Summary
What if a backdoor exists in your UEFI option ROM?
Related talks
Videos·54 min
Ash Wolf
Ash Wolf analyzes Securi-Tay 2020: OEMs HATE it! Get paid to backdoor phones with this One Weird Trick!.
backdoorsecuri-tayoem+2
Black Hat·41 min
Alexander Tereshkin · Alexander Matrosov · Adam Zabrocki
Security researchers examine technical aspects of Safeguarding UEFI Ecosystem: Firmware Supply Chain is Hard(coded).
supply-chainuefisafeguarding+2
Black Hat·52 min
Andrey Labunets · Philip Lebedev · Alex Matrosov · Yegor Vasilenko
Engineers explore architecture and security mechanisms for efiXplorer: Hunting for UEFI Firmware Vulnerabilities at Scale with Automated Static Analysis.
efixplorerhuntinguefi+2