通过分析统一可扩展固件接口(UEFI)的体系架构和执行流程,发现由于未对加载的可扩展固件接口(EFI)驱动和应用程序进行校验,导致其存在安全隐患,并相应提出3种UEFI的攻击方法,即感染OS Loader、篡改NVRAM变量和插入EFI runtime driver.分析结果表明,这3种方法都能实现操作系统内核劫持.%By analyzing framework and boot sequence of Unified Extensible Firmware InterfaceftJEFI), this paper finds out that UEFI does not verify its Extensible Firmware Interface(EFI) driver and EFI application and it leads to some secure problems. Three methods of attacking UEFI are proposed, including OS Loader infecting, NVRAM variable modification and EFI runtime driver injection. Analysis result shows that all of the methods can hijack the operating system kernel.
展开▼
