基于UEFI固件的攻击检测系统的设计与实现

Design and Implementation of Attack Detection System Based on UEFI Firmware

摘要: 随着网络攻击技术的不断发展，针对固件的攻击已经出现，对计算机造成了巨大的威胁。本文详细分析了UEFI BIOS的功能、特点及安全威胁，诠释了固件安全的重要性。固件中的恶意代码难以被杀毒软件发现和消除。本文通过对固件层信息的获取和解析，设计与实现了一种基于UEFI固件的攻击检测系统。

Abstract: With the continuous development of network attack technology, attack against the firmware has emerged, causing a huge threat to the computer. This paper analyzes the function, characteristics and security threat of UEFI BIOS in detail, explaining the importance of firmware security. The malicious codes in the firmware are hard to be found and eliminated by the antivirus software. This paper has designed and implemented an attack detection system based on UEFI firmware by getting and analyzing the information about the firmware.