D3-PFV
Peripheral Firmware Verification
Definition
Cryptographically verifying peripheral firmware integrity.
# How it works
Peripherial firmware is collected and analyzed on a host either periodically or on demand. This information may be collected for future comparisons.
Changes in firmware hash values may indicate that the firmware has been tampered with or that firmware images are not maintained to current baselined versions, or even known vulnerable versions are deployed.
Considerations
•Trust baselines will need to be generated for specific devices
•Changes to trusted configurations will need to be managed across the enterprise
Artifact Relationships
This defensive technique relates to specific digital artifacts.