论文标题
保护EDK II图像加载器
Securing the EDK II Image Loader
论文作者
论文摘要
统一的可扩展固件接口（UEFI）是过去十年中所有基于X86的平台中使用的固件与操作系统之间的标准化接口，它继续传播到其他体系结构，例如ARM和RISC-V等其他体系结构。 UEFI基于包含驱动程序或公共对象文件格式的驱动程序或应用程序的图像（coff）的图像，或作为便携式可执行文件（PE）或TERSE可执行文件（TE）。 Tianocore EDK II是FACTO标准通用UEFI服务实施，包括图像加载功能。它对安全问题的跟踪显示了许多设计和实现缺陷，其中一些尚未解决。在本文中，我们概述了安全UEFI映像加载程序的要求和现有实施的问题。作为替代方案，我们提出了一个具有正式验证的图像加载器，该图像加载器都用细粒度的硬化支持PE和TE图像，从而可以与EDK II无缝集成，然后与其他Firmwares进行无缝集成。
The Unified Extensible Firmware Interface (UEFI) is a standardised interface between the firmware and the operating system used in all x86-based platforms over the past ten years, which continues to spread to other architectures such as ARM and RISC-V. The UEFI incorporates a modular design based on images containing a driver or an application in a Common Object File Format (COFF) either as a Portable Executable (PE) or as a Terse Executable (TE). The de-facto standard generic UEFI services implementation, including the image loading functionality, is TianoCore EDK II. Its track of security issues shows numerous design and implementation flaws some of which are yet to be addressed. In this paper we outline both the requirements for a secure UEFI Image Loader and the issues of the existing implementation. As an alternative we propose a formally verified Image Loader supporting both PE and TE images with fine-grained hardening enabling a seamless integration with EDK II and subsequently with the other firmwares.
