D3-FV
Firmware Verification
Definition
Cryptographically verifying firmware integrity.
How it works
Cryptographic hash values are computed for system and peripheral firmware. The hash values are compared against precomputed hash values for the identified firmware. A hash value mismatch may indicate that the firmware may have been tampered with or updated with a non-current release indicating a misconfiguration for the system.
Considerations
•Requires cryptographically computed hash values of firmware
•Requires storage of precomputed firmware hash values
Artifact Relationships
This defensive technique relates to specific digital artifacts.