"Booting" is the process of starting up a computer from the OFF state. This tag is for attacks and security measures relating to the startup routine of computer hardware, firmware, or operating systems.

learn more… | top users | synonyms

-1
votes
2answers
43 views

How can I prevent booting from media devices?

first of all, I deeply apologise because of my silly question. The thing is that I am learning about hardening. I have VMware workstation 12, and I've created a VM CentOS 7 machine (to be integrated ...
4
votes
1answer
264 views

Can the windows Remote Procedure Call subsystem be modified from the default without causing Windows 8/8.1/10 to break?

This is a question that personally as a security professional has bugged me for a long time. So, a default Windows installation, from XP up to 10, typically has a few services listening on the quad-...
4
votes
0answers
31 views

UEFI Firmware integrity measurement

we know that UEFI measures the OS bootloader image integrity every time we power on our computer, if Secure Boot enabled. With the growing attacks and discoveries of UEFI vulnerabilities, the ...
3
votes
0answers
28 views

How are TPMs provisioned for Intel Trusted Execution Environment (TXT)?

For Intel TXT to work, the TPM must be provisioned. Intel provides some tools for doing this but many are protected by non-public login or an NDA. Many OEM platform vendors provision their boards and ...
1
vote
0answers
78 views

Android Rooting and Evil Maid Attacks

I'm trying to learn more about full disk encryption (in the context of a Linux based server) and what schemes offer true security and which only offer the illusion of security. As I understand it, ...
1
vote
0answers
189 views

Does Windows 8 UEFI Trusted Boot protect SSDT table from modification?

I read from a link that says: Trusted Boot takes over where Secure Boot leaves off. The bootloader verifies the digital signature of the Windows 8 kernel before loading it. The Windows 8 kernel, ...
0
votes
0answers
23 views

OS X bootloader on USB possible? (to protect against evil maid attacks)

Is creating a Mac bootloader on USB possible? I know it can be done on Linux. Can someone please provide a link or document the steps here? To give some more details: I plan to encrypt using ...
0
votes
0answers
29 views

Will zero-filling empty drive space detect bootkits?

I've heard that bootkits generally write their payload at the end of the drive, and don't register this data with the host OS. Does that mean, that to test for bootkits, I could simply zero-fill all ...
0
votes
0answers
21 views

What is purpose of fipscheck utility and fipscheck library on Linux?

So I am messing around with dracut and I am trying to get my Linux system in FIPS 140 mode by passing fips=1 to my linux kernel at the boot time from grub. However, I got confused on why dracut ...
0
votes
0answers
27 views

Kernel-based integrity measurement of an operating system startup in RAM

This idea is based on the Integrity Measurement Architecture and the usage of a trusted platform module to ensure the integrity of boot procedures. Let's say we have a kernel designed for an embedded ...