DasharoDec 1

Stuart Yoder explains why standard assessment tools like #LFVS, #HSI, and #CHIPSEC struggle on #ARM systems, where diverse hardware designs make direct inspection unreliable. The lack of consistent, inspectable security primitives leaves significant blind spots for teams trying to validate platform security.

🔗 Video, description & slides:
https://cfp.3mdeb.com/developers-vpub-0xc-2024/talk/RMEWFV/

Security assessment on Arm platforms Developers vPub 0xC

Security assessment tooling such as LFVS HSI and Chipsec rely on standard security mechanisms that can be directly inspected by a tool. Due to the diversity of Arm-based hardware platforms doing direct inspection is difficult. This presentation discusses work underway to evaluate how security assessment could be done on Arm platforms and work towards a solution.

DasharoSep 7, 2024

🎤 Announcing Stuart Yoder's talk at Dasharo vPub: "Security Assessment on Arm Platforms"!

As a System Architect at Arm, Stuart will share insights into security assessments across Arm-based hardware. Considering tools like LFVS HSI and Chipsec, he will discuss ongoing efforts to enhance security evaluation techniques.

🗓️ Sep 12, 20:00 UTC

📄 More info: https://buff.ly/3ZbZSTe
🎟️ Sign up: https://buff.ly/47dBUJk

#Dasharo #Arm #Security #Firmware #CyberSecurity #Chipsec #FirmwareSecurity

Security assessment on Arm platforms Developers vPub 0xC

Security assessment tooling such as LFVS HSI and Chipsec rely on standard security mechanisms that can be directly inspected by a tool. Due to the diversity of Arm-based hardware platforms doing direct inspection is difficult. This presentation discusses work underway to evaluate how security assessment could be done on Arm platforms and work towards a solution.

💻📡🛰️ IooNagNov 19, 2022

I recently upstreamed a script to spawn a QEMU virtual machine running UEFI Shell + CHIPSEC which helps debug issues and implement new features: https://github.com/chipsec/chipsec/blob/1.9.0/scripts/qemu_efi.py

This script has an issue: to launch the OVMF shell in QEMU, it disables networking (-nic none), otherwise OVMF tries PXE Boot. If you know how to keep networking, or sense other ways to improve this script, feel free to contribute to https://github.com/chipsec/chipsec 💻​
#chipsec #uefishell #OVMF

chipsec/qemu_efi.py at 1.9.0 · chipsec/chipsec

Platform Security Assessment Framework. Contribute to chipsec/chipsec development by creating an account on GitHub.

GitHub