Exam Review INFO24178
Chapter 9:
Client Security:
o Securing the client involves, securing the operating syste,
o Using hardware system security
o Protecting peripheral devices connected to the client
Hardware
...
Exam Review INFO24178
Chapter 9:
Client Security:
o Securing the client involves, securing the operating syste,
o Using hardware system security
o Protecting peripheral devices connected to the client
Hardware Security:
o Securing booting tools
o A hardware root of trust
o Preventing electromagnetic spying
Secure Booting:
o BIOS (Basic Input/Output System)
o Firmware used on early computers to hold the boot process
o Ability to update the BIOS with a firmware update opened the door for threat actors to
create malware to infect BIOS
o To combat attacks, UEFI (Unified Extensible Firmware Interface) was developed to
replace BIOS
o In conjunction with UEFI Secure Boot security standard was also created
o When using UEFI and Secure Boot, a computer checks the digital signature of each piece
of boot software
o If signatures are deemed valid the computer starts otherwise it does not boot up
Hardware Root of Trust
o Chain of trust
o Each element of the boost process relies on the confirmation of the previous element to
know that the entire process is secure
o Hardware root of trust
o Strongest point is hardware, which cannot be modified
o Security checks are rooted in hardware checks
Electromagnetic Spying
o US gov has developed a classified standard intended to prevent attackers from picking
up electromagnetics fields from government buildings
o Known as TEMPEST (Telecommunications Electronics Material Protected from Emanating
Spurious Transmissions)
Supply Chain Infections
o A network that moves products from the supplier to the customer
o All of the different steps opened the door for malware to be injected into products
during manufacture or storage
o If planted in the firmware ROM of a device, it can be difficult or impossible to clean an
infected device of malware
o Users may receive infected devices at the point of purchase unaware
o Cannot be easily prevented
OS Security Config
o Should include, disabling unn
[Show More]