D3-SFV

Detect
System Firmware Verification

Definition

Cryptographically verifying installed system firmware integrity.

How it works

Cryptographic hash values are computed for system firmware. The hash values are compared against precomputed firmware hash values to determine if the firmware has been tampered with.

When system firmware verification fails a set of predefined responses is typically invoked. The responses may direct the system to disable some devices or operations.

Considerations

Requires the use of system provided security modules

Secure hash values will need to be computed for firmware

Artifact Relationships

This defensive technique relates to specific digital artifacts.

verifies
System Firmware Verification
System Firmware

References

Reference - Firmware Verification Eclypsium Reference - Platform Firmware Resiliency Guidelines - NIST