We're sorry but this page doesn't work properly without JavaScript enabled. Please enable it to continue.
Feedback
00:00

Formal Metadata

Title
Boot2root
Subtitle
Auditing Boot Loaders by Example
Title of Series
Number of Parts
254
Author
License
CC Attribution 4.0 International:
You are free to use, adapt and copy, distribute and transmit the work or content in adapted or unchanged form for any legal purpose as long as the work is attributed to the author in the manner specified by the author or licensor.
Identifiers
Publisher
Release Date
Language

Content Metadata

Subject Area
Genre
Abstract
The Achilles heel of [your secure device] is the secure boot chain. In this presentation we will show our results from auditing commonly used boot loaders and walk through the attack surface you open yourself up to. You would be surprised at how much attack surface exists when hardening and defense in depth is ignored. From remote attack surface via network protocol parsers to local filesystems and various BUS parsing, we will walk through the common mistakes we've seen by example and showcase how realistic it is for your product's secure boot chain to be compromised.
Keywords
Element (mathematics)Directory serviceRoundness (object)Online helpBootingWater vaporoutputCovering space19 (number)Multiplication sign2 (number)Computer animationJSONLecture/ConferenceMeeting/Interview
Physical systemSystem programmingInformation securityBootingSample (statistics)Physical systemInformation securityBootingSystems engineeringSlide ruleOpen sourceCodeInterpreter (computing)AreaWater vaporSoftware bugSurfaceOperating system1 (number)Meeting/InterviewComputer animation
Kernel (computing)Game controllerChainBootingCodeSystem callCoroutinePresentation of a groupSimilarity (geometry)Data managementPhysical systemTime zoneAsynchronous Transfer ModeInformation securityReverse engineeringData integritySurfaceIdeal (ethics)Independence (probability theory)Server (computing)Workstation <Musikinstrument>Embedded systemSoftwareSource codeFreewareContinued fractionDevice driverIntegrated development environmentBefehlsprozessorWhiteboardGastropod shellConfiguration spaceMeta elementAddress spaceComputer networkDirect numerical simulationDynamic Host Configuration ProtocolFile systemLevel (video gaming)Structural loadSerial portComputer-generated imageryNP-hardMiniDiscCompact spaceSCSIFlash memoryProcess capability indexGoogolRevision controlInstallable File SystemDensity of statesUser-defined functionPlastikkarteModule (mathematics)FirmwareEmulationOpen setVirtual realityInterface (computing)Computing platformRouter (computing)File Transfer ProtocolOpen sourceComputer configurationCommunications protocolImplementationLatent heatCodeImplementationSoftwareGame theoryFile systemTopological vector spaceProduct (business)Wave packetVariable (mathematics)Integrated development environmentComa BerenicesInjektivitätChainMereologyCore dumpDevice driverQuicksortAreaConfiguration spaceRevision controlOperator (mathematics)Normal (geometry)Software bugConnectivity (graph theory)Presentation of a groupInformation securityVector potentialGastropod shellPoint (geometry)Control flowKernel (computing)Communications protocolPivot elementReverse engineeringModule (mathematics)Electronic mailing listSurfaceComputer fileBlack boxBootingOpen sourceWhiteboardDifferent (Kate Ryan album)Likelihood functionLengthVulnerability (computing)Stack (abstract data type)Right angleOperating systemDefault (computer science)UsabilityMedical imagingParsingTelecommunicationBuildingLevel (video gaming)BitGroup actionMultiplicationPhysical systemSystem callHeegaard splittingGraphical user interfaceLatent heatEstimatorWorkstation <Musikinstrument>Sign (mathematics)Endliche ModelltheorieComputing platformMultiplication signGame controllerComputer animation
Cloud computingInformation securityKernel (computing)Operations researchSystem programmingPresentation of a groupBootingTime zoneImplementationArmContinued fractionBuildingSample (statistics)Source codeIntegrated development environmentBootingCodeAreaNormal (geometry)Information securityBuildingVariable (mathematics)Link (knot theory)Pivot elementSurfaceMultiplication signPhysical systemProcess (computing)WebsiteComputer animation
Time zoneBootingShooting methodLevel (video gaming)Read-only memoryRevision controlComputer hardwareFormal verificationElectronic signatureData storage deviceFlash memoryPoint (geometry)Computer networkVariable (mathematics)Integrated development environmentCodeArmStructural loadKernel (computing)Parameter (computer programming)Open sourceFlow separationChainNon-volatile memorySystem programmingComputer fileSurfaceInformation securityFormal verificationStructural loadVotingBootingComputer hardwareSoftwareFile systemSemiconductor memoryLevel (video gaming)WindowIntegrated development environmentFlow separationChainConfiguration spaceRevision controlMeasurementElectronic signatureState observerOpen setKernel (computing)Communications protocolInteractive televisionElectronic mailing listSurfaceNon-volatile memoryVulnerability (computing)Stack (abstract data type)ImplementationOrder (biology)Modal logicBus (computing)Physical systemMachine visionProcess (computing)Connectivity (graph theory)RoutingComputer fileOpen sourceRule of inferenceOperating systemGame controllerMeeting/InterviewComputer animation
Non-volatile memoryComputer hardwareSystem programmingComputer fileSurfaceBootingStandard deviationGame controllerVariable (mathematics)Integrated development environmentParsingVariable (mathematics)Integrated development environmentProcess (computing)BitBootingCycle (graph theory)Game controllerFunctional (mathematics)System callValidity (statistics)QuicksortComputer animationMeeting/Interview
Continued fractionSurfaceNon-volatile memoryBootingFluid staticsData typeComputer configurationDynamic Host Configuration ProtocolMessage passingServer (computing)Computer hardwareAddress spaceClient (computing)HTTP cookieFile Transfer ProtocolInformationSource codeFrame problemCommunications protocolBroadcasting (networking)String (computer science)LengthBuffer solutionLink (knot theory)ImplementationSoftwareIntegrated development environmentBitSoftware bugPrinciple of maximum entropyBootingExploit (computer security)Computer wormPattern languageDifferent (Kate Ryan album)Computer animationXML
BuildingBootingDemo (music)Integrated development environmentBitPattern languageCodeFile systemVariable (mathematics)Functional (mathematics)Structural loadSoftware bugBootingElement (mathematics)LengthNon-volatile memoryDefault (computer science)Sampling (statistics)AreaWeightGreatest elementAddress spaceBuffer solutionDifferent (Kate Ryan album)Cycle (graph theory)Meeting/InterviewComputer animation
Demo (music)Data integrityPrime idealSurfaceFile systemMedical imagingOrder (biology)File systemIntegrated development environmentArithmetic meanLetterpress printingPhysical systemPrime idealTerm (mathematics)QuicksortGoodness of fitData storage deviceFile formatAddress spaceSurfaceFlash memoryBootingRight angleString (computer science)BitComputer fileNon-volatile memoryMeeting/InterviewComputer animation
Physical systemComputer fileSoftwareData integrityParsingSurfaceFuzzy logicDevice driverBinary fileTable (information)Partition (number theory)Computer-generated imageryFile systemPrime idealSurfaceComputer fileBootingLevel (video gaming)BitNumberLink (knot theory)QuicksortServer (computing)Software bugCNNSymbol tableCodeSimulationParsingFile systemINTEGRALIntegrated development environmentCovering spaceRaster graphics1 (number)Lecture/ConferenceMeeting/InterviewComputer animation
Block (periodic table)Asynchronous Transfer ModeGradientImplementationStack (abstract data type)Patch (Unix)ParsingBuffer overflowLogicSimulationParsingFile systemSemiconductor memoryParsingIntegerCausalityFunctional (mathematics)Content (media)Memory managementLink (knot theory)Pointer (computer programming)Reading (process)Raster graphicsPrimitive (album)Buffer solutionTouchscreenClassical physicsBuffer overflowLevel (video gaming)Turtle graphicsBitText editorPerfect groupRoboticsPoint (geometry)File formatWebsiteMappingComputer animation
Computer networkService (economics)Dynamic Host Configuration ProtocolDirect numerical simulationFile Transfer ProtocolSurfaceiSCSIRead-only memoryInformationBuffer solutionCodeDirect numerical simulationClient (computing)Stack (abstract data type)iSCSIService (economics)WeightBlogRight angleGoodness of fitBootingQuicksortSurfaceMeeting/InterviewComputer animation
Direct numerical simulationDynamic Host Configuration ProtocolRead-only memoryComputer networkInformationSurfaceSoftwareParsingSemiconductor memoryProduct (business)Integrated development environmentCausalityNumeral (linguistics)LeakQuicksortDependent and independent variablesSoftware bugCommunications protocolProgrammschleifePrimitive (album)Direct numerical simulationBootingTLB <Informatik>Intrusion detection systemStandard deviationStack (abstract data type)Cache (computing)InformationBuildingFluid staticsGoodness of fitCuboidParticle systemRight angleComputer animation
EmailStandard deviationOvalTelephone number mappingDirect numerical simulationBootingContinued fractionFile Transfer ProtocolInformationLengthSurfaceParsingCodeTheory of relativitySoftwareParsingValidity (statistics)Semiconductor memoryFluid staticsEntire functionIntegrated development environmentFiber bundleTotal S.A.Loop (music)NumberEmailQuicksortServer (computing)CASE <Informatik>Software bugPoint (geometry)Frame problemDirect numerical simulationBuffer solutionBootingCondition numberLengthMultiplication sign2 (number)Stack (abstract data type)Right angleSpeech synthesisLink (knot theory)GodMetropolitan area networkPressureVotingView (database)FreewareGraphics tabletComputer animation
Integrated development environmentBootingParsingComputer networkCommunications protocolKeyboard shortcutCausalityFrame problemGame theorySurfaceLoop (music)QuicksortBootingVideo gameSurgeryMultiplication signSoftwareComputer configurationEquivalence relationTerm (mathematics)CASE <Informatik>Software bugWordFrame problemKeyboard shortcutBuffer solutionBlogLengthRight angle1 (number)Semiconductor memorySpherical capOpen sourceInformation extractionStack (abstract data type)Meeting/InterviewComputer animation
ParsingData storage deviceSoftware protection dongleSurfaceNumeral (linguistics)Prime idealNumberSoftware bugSpherical capSurfaceBootingOpen sourceStack (abstract data type)Validity (statistics)Variable (mathematics)Doubling the cubeFunctional (mathematics)Data recoveryEmailQuicksortSocial classData storage deviceCommunications protocolComputer fileLengthMultiplication signBuffer overflowComputer wormTesselationLevel (video gaming)Hecke operatorGroup actionContent (media)Structural loadMereologyQuantum stateLink (knot theory)Configuration spaceDependent and independent variablesHypermediaTowerScripting languageBuffer solutionWebsiteRight angleMeeting/InterviewLecture/Conference
Total S.A.Configuration spaceData Encryption StandardFast Fourier transformSemiconductor memoryCountingNumberConfiguration spaceRevision controlArray data structureBuffer solutionLengthContent (media)EmailLink (knot theory)Software bugScripting languageRule of inferenceInterface (computing)XML
Data bufferInternet forumStack (abstract data type)Price indexAsynchronous Transfer ModeComputer-generated imageryBootingFreewareProcess (computing)Level (video gaming)Turing testAddress spaceIterationBlogSoftware developerSurfaceSequenceParsingSemiconductor memoryBus (computing)Line (geometry)ChainPrime idealEmailQuicksortConfiguration spaceReal numberDependent and independent variablesCASE <Informatik>Pointer (computer programming)Flash memoryBootingLengthService (economics)Data structureSynchronizationState of matterLink (knot theory)Boss CorporationSurfaceFreewareRight angleComputer animation
CountingRippingData managementPhysical systemAsynchronous Transfer ModeNP-hardEntire functionInformation securityMemory managementSurfaceCellular automatonParsingIntelBoundary value problemInformationRead-only memoryImplementationComputer architectureCombinational logicGame theorySemiconductor memoryIntegerFlow separationArithmetic meanNumeral (linguistics)Device driverQuicksortRange (statistics)Exception handlingSystem administratorPresentation of a groupControl flowBootingWhiteboardArmBoundary value problemBuffer overflowService (economics)Computer-assisted translationTurtle graphicsCausalityMaizeDataflowWeightCASE <Informatik>Asynchronous Transfer ModeoutputExclusive orSurfaceCurveMultiplication signRule of inferenceStack (abstract data type)Right angle1 (number)Computer animation
LogicValidity (statistics)Semiconductor memoryLevel (video gaming)WindowMaizeDevice driverQuicksortGoodness of fitPlanningSoftware bugPoint (geometry)Communications protocolObservational studyGoogolWebsiteDisk read-and-write headComputing platformMultiplication signBoundary value problemRight angleImplementationSide channel attackMeeting/Interview
MassControl flowBootingTuring testNormal (geometry)Device driverComputer programmingPhysicalismConfiguration spaceGoodness of fitCommunications protocolBootingPOKEComputing platformSemiconductor memoryLevel (video gaming)Term (mathematics)Software bugContext awarenessFigurate numberXML
Computer hardwareCodeData integrityImplementationComputer hardwareMathematicsPresentation of a groupCodeFormal verificationGoodness of fitAsynchronous Transfer ModeElectronic signatureLatent heatBlogMultiplication signInfinityForcing (mathematics)Hydraulic motorInjektivitätLoop (music)Buffer overflowSide channel attackMeeting/InterviewComputer animation
BefehlsprozessorPower (physics)Computer hardwareStructural equation modelingOpticsFibonacci numberCodeOpticsHacker (term)INTEGRALPower (physics)Spectrum (functional analysis)Presentation of a groupBootingKey (cryptography)Side channel attackCryptographyQuicksortSpherical capDiscrepancy theorySpacetimeComputer animation
CodeData integrityNP-hardSheaf (mathematics)Electronic mailing listPresentation of a groupBefehlsprozessorCodeMereologySoftware bugElectronic signatureCuboidElectronic mailing listBootingComputing platformSpacetimeBus (computing)Grand Unified TheorySurfaceSign (mathematics)BlogComputer animation
Computer-generated imageryBootingDevice driverSystem programmingComputer fileSurfaceGroup actionSystem callGame theoryCodeDataflowGroup actionSystem callBootingMedical imagingSoftwareIntegrated development environmentSurfaceCodeDevice driverINTEGRALLink (knot theory)Lecture/ConferenceMeeting/InterviewComputer animation
CodeDataflowGame theoryBootingMathematical analysisInterface (computing)Group actionCodeGame theorySlide ruleCore dumpLink (knot theory)System callPoint (geometry)Fuzzy logicBlack boxExploit (computer security)Data structureBuildingGroup actionControl flowInterface (computing)
InternetworkingCodeRepository (publishing)Physical lawNumberInformation securityLaptopNominal numberOpen sourceLine (geometry)SoftwareBus (computing)Fluid staticsFirmwareKernel (computing)Module (mathematics)Buffer solutionPhysical systemSurfaceBootingDiscrete element methodLecture/ConferenceMeeting/Interview
CodeComputer hardwareGame theorySemiconductor memoryIntegrated development environmentBefehlsprozessorMaxima and minimaPhysical systemCore dumpSoftware bugLaptopKernel (computing)Module (mathematics)SurfaceSign (mathematics)Flash memoryBootingExtreme programmingRight angleBus (computing)MereologyMeeting/Interview
Reverse engineeringSource codeBookmark (World Wide Web)BootingDisassemblerType theoryBitNumberException handlingCASE <Informatik>CuboidMultiplication signLecture/ConferenceMeeting/Interview
FirmwareBooting2 (number)Right angleReliefBitProjective planeDrum memoryTouch typingRevision controlSoftware bugData storage deviceReverse engineeringRow (database)Computer hardwareSlide ruleMachine visionShared memoryPoint (geometry)Inheritance (object-oriented programming)CuboidPatch (Unix)Block (periodic table)Service (economics)Lecture/ConferenceMeeting/Interview
Perspective (visual)Maxima and minimaInternetworkingSoftware bugSurfaceBootingArmMathematicsContext awarenessOffice suiteLecture/ConferenceMeeting/Interview
SoftwareBus (computing)Integrated development environmentNumberConnectivity (graph theory)Core dumpDirect numerical simulationBootingLecture/Conference
Computer hardwareLogicComputer programmingSemiconductor memoryBitProjective planeNumberCASE <Informatik>Reading (process)Direction (geometry)Run time (program lifecycle phase)Multiplication signFormal languageProgramming languageSoftware bugError messageLecture/ConferenceMeeting/Interview
Lecture/ConferenceComputer animation
Transcript: English(auto-generated)