國立高雄大學圖資館 |

Language: English

Back

Building secure firmwarearmoring the...

SpringerLink (Online service)

Building secure firmwarearmoring the foundation of the platform /

Record Type:	Electronic resources : Monograph/item
Title/Author:	Building secure firmwareby Jiewen Yao, Vincent Zimmer.
Reminder of title:	armoring the foundation of the platform /
Author:	Yao, Jiewen.
other author:	Zimmer, Vincent.
Published:	Berkeley, CA :Apress :2020.
Description:	xxx, 930 p. :ill., digital ;24 cm.
Contained By:	Springer Nature eBook
Subject:	Data protection.
Online resource:	https://doi.org/10.1007/978-1-4842-6106-4
ISBN:	9781484261064$q(electronic bk.)

Building secure firmwarearmoring the foundation of the platform /
Yao, Jiewen.

Building secure firmwarearmoring the foundation of the platform /[electronic resource] :by Jiewen Yao, Vincent Zimmer. - Berkeley, CA :Apress :2020. - xxx, 930 p. :ill., digital ;24 cm.

Part I: Overview -- Chapter 1: Introduction to Firmware -- Chapter 2: Proactive Firmware Security Development -- Part II: Security Architecture -- Chapter 3: Firmware Resilience - Protection -- Chapter 4: Firmware Resilience - Detection -- Chapter 5: Firmware Resilience - Recovery -- Chapter 6: OS Resilience -- Chapter 7: Trusted Boot -- Chapter 8: Device Security -- Chapter 9: S3 Resume -- Chapter 10: Access Control -- Chapter 11: Configuration -- Chapter 12: Security Model -- Chapter 13: Virtual Firmware -- Part III: Security Development -- Chapter 14: General Coding Practice -- Chapter 15: Compiler Defensive Technology -- Chapter 16: The Kernel -- Chapter 17: Trusted Execution Environment -- Chapter 18: Silicon Security Configuration -- Chapter 19: Cryptography -- Chapter 20: Programming Language -- Part IV: Security Test and Maintenance -- Chapter 21: Security Unit Test -- Chapter 22: Security Validation and Penetration -- Chapter 23: Maintenance.

Use this book to build secure firmware. As operating systems and hypervisors have become successively more hardened, malware has moved further down the stack and into firmware. Firmware represents the boundary between hardware and software, and given its persistence, mutability, and opaqueness to today's antivirus scanning technology, it represents an interesting target for attackers. As platforms are universally network-connected and can contain multiple devices with firmware, and a global supply chain feeds into platform firmware, assurance is critical for consumers, IT enterprises, and governments. This importance is highlighted by emergent requirements such as NIST SP800-193 for firmware resilience and NIST SP800-155 for firmware measurement. This book covers the secure implementation of various aspects of firmware, including standards-based firmware-such as support of the Trusted Computing Group (TCG), Desktop Management Task Force (DMTF), and Unified Extensible Firmware Interface (UEFI) specifications-and also provides code samples and use cases. Beyond the standards, alternate firmware implementations such as ARM Trusted Firmware and other device firmware implementations (such as platform roots of trust), are covered. You will: Get an overview of proactive security development for firmware, including firmware threat modeling Understand the details of architecture, including protection, detection, recovery, integrity measurement, and access control Be familiar with best practices for secure firmware development, including trusted execution environments, cryptography, and language-based defenses Know the techniques used for security validation and maintenance.

ISBN: 9781484261064$q(electronic bk.)

Standard No.: 10.1007/978-1-4842-6106-4doiSubjects--Topical Terms:

202312
Data protection.

LC Class. No.: HF5548.37 / .Y36 2020

Dewey Class. No.: 005.8

Building secure firmwarearmoring the foundation of the platform /
LDR:03682nmm a2200325 a 4500 001 589080
003 DE-He213
005 20210205095832.0
006 m d
007 cr nn 008maaau
008 210525s2020 cau s 0 eng d
020 $a 9781484261064$q(electronic bk.)
020 $a 9781484261057$q(paper)
024 7 $a 10.1007/978-1-4842-6106-4 $2 doi
035 $a 978-1-4842-6106-4
040 $a GP $c GP
041 0 $a eng
050 4 $a HF5548.37 $b .Y36 2020
072 7 $a UR $2 bicssc
072 7 $a COM053000 $2 bisacsh
072 7 $a UR $2 thema
082 0 4 $a 005.8 $2 23
090 $a HF5548.37 $b .Y25 2020
100 1 $a Yao, Jiewen. $3 880791
245 1 0 $a Building secure firmware $h [electronic resource] : $b armoring the foundation of the platform / $c by Jiewen Yao, Vincent Zimmer.
260 $a Berkeley, CA : $b Apress : $b Imprint: Apress, $c 2020.
300 $a xxx, 930 p. : $b ill., digital ; $c 24 cm.
505 0 $a Part I: Overview -- Chapter 1: Introduction to Firmware -- Chapter 2: Proactive Firmware Security Development -- Part II: Security Architecture -- Chapter 3: Firmware Resilience - Protection -- Chapter 4: Firmware Resilience - Detection -- Chapter 5: Firmware Resilience - Recovery -- Chapter 6: OS Resilience -- Chapter 7: Trusted Boot -- Chapter 8: Device Security -- Chapter 9: S3 Resume -- Chapter 10: Access Control -- Chapter 11: Configuration -- Chapter 12: Security Model -- Chapter 13: Virtual Firmware -- Part III: Security Development -- Chapter 14: General Coding Practice -- Chapter 15: Compiler Defensive Technology -- Chapter 16: The Kernel -- Chapter 17: Trusted Execution Environment -- Chapter 18: Silicon Security Configuration -- Chapter 19: Cryptography -- Chapter 20: Programming Language -- Part IV: Security Test and Maintenance -- Chapter 21: Security Unit Test -- Chapter 22: Security Validation and Penetration -- Chapter 23: Maintenance.
520 $a Use this book to build secure firmware. As operating systems and hypervisors have become successively more hardened, malware has moved further down the stack and into firmware. Firmware represents the boundary between hardware and software, and given its persistence, mutability, and opaqueness to today's antivirus scanning technology, it represents an interesting target for attackers. As platforms are universally network-connected and can contain multiple devices with firmware, and a global supply chain feeds into platform firmware, assurance is critical for consumers, IT enterprises, and governments. This importance is highlighted by emergent requirements such as NIST SP800-193 for firmware resilience and NIST SP800-155 for firmware measurement. This book covers the secure implementation of various aspects of firmware, including standards-based firmware-such as support of the Trusted Computing Group (TCG), Desktop Management Task Force (DMTF), and Unified Extensible Firmware Interface (UEFI) specifications-and also provides code samples and use cases. Beyond the standards, alternate firmware implementations such as ARM Trusted Firmware and other device firmware implementations (such as platform roots of trust), are covered. You will: Get an overview of proactive security development for firmware, including firmware threat modeling Understand the details of architecture, including protection, detection, recovery, integrity measurement, and access control Be familiar with best practices for secure firmware development, including trusted execution environments, cryptography, and language-based defenses Know the techniques used for security validation and maintenance.
650 0 $a Data protection. $3 202312
650 1 4 $a Security. $3 760527
700 1 $a Zimmer, Vincent. $3 880792
710 2 $a SpringerLink (Online service) $3 273601
773 0 $t Springer Nature eBook
856 4 0 $u https://doi.org/10.1007/978-1-4842-6106-4
950 $a Professional and Applied Computing (SpringerNature-12059)