Applying the Principle of Least Privilege to System Management Interrupt Handlers with the Intel SMI Transfer Monitor
| Autor: | Brian Delgado, Karen L. Karavanic, Tejaswini Vibhute |
|---|---|
| Rok vydání: | 2020 |
| Předmět: |
Computer science
Firmware Principle of least privilege 020206 networking & telecommunications Hypervisor Context (language use) 02 engineering and technology Virtualization computer.software_genre 020204 information systems Systems management 0202 electrical engineering electronic engineering information engineering Operating system Interrupt System Management Mode computer |
| Zdroj: | HASP@MICRO |
| DOI: | 10.1145/3458903.3458907 |
| Popis: | Recent years have seen a growing concern over System Management Mode (SMM) and its broad access to platform resources. The SMI Transfer Monitor (STM) is Intel’s most powerful executing CPU context. The STM is a firmware-based hypervisor that applies the principle of least privilege to powerful System Management Interrupt (SMI) handlers that control runtime firmware. These handlers have traditionally had full access to memory as well as the register state of applications and kernel code even when their functionality did not require it. The STM has been been enabled for UEFI and, most recently, coreboot firmware, adding protection against runtime SMM-based attacks as well as establishing a firmware-based Trusted Execution Environment (TEE) capability. We provide a detailed overview of the STM architecture, evaluate its protections, and quantify its performance. Our results show the STM can protect against published SMM vulnerabilities with tolerable performance overheads. |
| Databáze: | OpenAIRE |
| Externí odkaz: |
|