D3-FV

Detect
Firmware Verification

Definition

Cryptographically verifying firmware integrity.

How it works

Cryptographic hash values are computed for system and peripheral firmware. The hash values are compared against precomputed hash values for the identified firmware. A hash value mismatch may indicate that the firmware may have been tampered with or updated with a non-current release indicating a misconfiguration for the system.

Considerations

Requires cryptographically computed hash values of firmware

Requires storage of precomputed firmware hash values

Artifact Relationships

This defensive technique relates to specific digital artifacts.

verifies
Firmware Verification
Firmware

References

Reference - Firmware Verification Eclypsium Reference - Firmware Verification Trapezoid Reference - Platform Firmware Resiliency Guidelines - NIST