Abstract

The paper presents an overview of current attacks on BIOS and Intel ME embedded software of modern Intel-based computers. We describe the results of the analysis of its security for system boards of basic manufacturers. We also allocate classes of attacks that make it possible to create implants whose discovery by traditional methods of searching for undeclared features becomes impossible or extremely difficult.

中文翻译：

---

基于Intel的现代计算机中UEFI BIOS嵌入式软件的安全性分析

摘要

本文概述了当前对基于Intel的现代计算机的BIOS和Intel ME嵌入式软件的攻击。我们描述了针对基本制造商的系统板的安全性分析结果。我们还分配了一些攻击类别，这些攻击类别使得可以创建植入物，而这些植入物通过传统的搜索未声明特征的方法来发现是不可能的或极其困难的。