title: Ð£ÑÑÑÐ°Ð½ÐµÐ½Ð¸Ðµ Ð°Ð¿Ð¿Ð°ÑÐ°ÑÐ½ÑÑ ÑÑÐ·Ð²Ð¸Ð¼Ð¾ÑÑÐµÐ¹ Ð² ÐºÐ¾Ð¼Ð¿ÑÑÑÐµÑÐ½ÑÑ ÑÐ¸ÑÑÐµÐ¼Ð°Ñ Ñ Ð¿Ð¾Ð¼Ð¾ÑÑÑ Ð¸Ð·Ð¼ÐµÐ½ÐµÐ½Ð¸Ñ ÐºÐ¾Ð½ÑÐ¸Ð³ÑÑÐ°ÑÐ¸Ð¸ ÑÑÑÑÐ¾Ð¹ÑÑÐ²
title: Ð´Ð¸Ð¿Ð»Ð¾Ð¼Ð½Ð°Ñ ÑÐ°Ð±Ð¾ÑÐ°
titleType: Subtitle
Creators: name: ÐÐ°Ð½Ð¸Ð½, ÐÐ¸ÑÐ¸Ð»Ð»
Publisher: name: Ð¡Ð°Ð½ÐºÑ-ÐÐµÑÐµÑÐ±ÑÑÐ³ÑÐºÐ¸Ð¹ Ð¿Ð¾Ð»Ð¸ÑÐµÑÐ½Ð¸ÑÐµÑÐºÐ¸Ð¹ ÑÐ½Ð¸Ð²ÐµÑÑÐ¸ÑÐµÑ ÐÐµÑÑÐ° ÐÐµÐ»Ð¸ÐºÐ¾Ð³Ð¾
Year: 2016
Subjects: Ð¸Ð½ÑÐ¾ÑÐ¼Ð°ÑÐ¸Ð¾Ð½Ð½Ð°Ñ Ð±ÐµÐ·Ð¾Ð¿Ð°ÑÐ½Ð¾ÑÑÑ
Ð°Ð¿Ð¿Ð°ÑÐ°ÑÐ½Ð¾Ðµ Ð¾Ð±ÐµÑÐ¿ÐµÑÐµÐ½Ð¸Ðµ
Ð¼Ð¾Ð´ÐµÐ»Ñ ÑÐ³ÑÐ¾Ð·
Ð¿ÑÐ¾ÑÐµÑÑÐ¾ÑÑ Intel
IBM-PC
information security
hardware
threat model
Intel processors

description: ÐÐ°ÑÑÐ¾ÑÑÐ°Ñ Ð´Ð¸Ð¿Ð»Ð¾Ð¼Ð½Ð°Ñ ÑÐ°Ð±Ð¾ÑÐ° Ð¿Ð¾ÑÐ²ÑÑÐµÐ½Ð° Ð°Ð½Ð°Ð»Ð¸Ð·Ñ Ð±ÐµÐ·Ð¾Ð¿Ð°ÑÐ½Ð¾ÑÑÐ¸ IBM-PC ÑÐ¾Ð²Ð¼ÐµÑÑÐ¸Ð¼ÑÑ ÐºÐ¾Ð¼Ð¿ÑÑÑÐµÑÐ½ÑÑ ÑÐ¸ÑÑÐµÐ¼ Ð½Ð° Ð±Ð°Ð·Ðµ Ð°ÑÑÐ¸ÑÐµÐºÑÑÑ x86 Ð¸ x86-64. Ð ÑÐ¾Ð´Ðµ ÑÐ°Ð±Ð¾ÑÑ Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ñ Ð¾ÑÐ¾Ð±ÐµÐ½Ð½Ð¾ÑÑÐ¸ Ð°Ð¿Ð¿Ð°ÑÐ°ÑÐ½ÑÑ Ð°ÑÐ°Ðº, Ð¸Ñ Ð¾ÑÐ½Ð¾Ð²Ð½ÑÐµ ÑÐµÐ»Ð¸, Ð¿Ð¾ÑÐ»ÐµÐ´ÑÑÐ²Ð¸Ñ, ÑÑÐ»Ð¾Ð²Ð¸Ñ Ð¸Ñ ÑÑÐ¿ÐµÑÐ½Ð¾Ð³Ð¾ ÑÐµÐ·ÑÐ»ÑÑÐ°ÑÐ°, Ð° ÑÐ°ÐºÐ¶Ðµ Ð¼ÐµÑÐ¾Ð´Ð¸ÐºÐ° Ð·Ð°ÑÐ¸ÑÑ Ð¾Ñ ÑÐ°ÐºÐ¾Ð³Ð¾ ÐºÐ»Ð°ÑÑÐ° Ð°ÑÐ°Ðº. Ð ÑÐ°Ð¼ÐºÐ°Ñ Ð¿ÑÐ¾Ð²ÐµÐ´ÐµÐ½Ð½Ð¾Ð³Ð¾ Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ñ Ð¿ÑÐ¾Ð²ÐµÐ´ÐµÐ½ Ð°Ð½Ð°Ð»Ð¸Ð· Ð°Ð¿Ð¿Ð°ÑÐ°ÑÐ½ÑÑ ÑÐµÐ³Ð¸ÑÑÑÐ¾Ð² ÑÐ¸ÑÑÐµÐ¼Ñ, Ð²Ð»Ð¸ÑÑÑÐ¸Ñ Ð½Ð° ÐµÐµ Ð±ÐµÐ·Ð¾Ð¿Ð°ÑÐ½Ð¾ÑÑÑ, Ð¿Ð¾Ð´ÑÐ¾Ð±Ð½Ð¾ ÑÐ°ÑÑÐ¼Ð¾ÑÑÐµÐ½Ð° Ð²Ð·Ð°Ð¸Ð¼Ð¾ÑÐ²ÑÐ·Ñ Ð·Ð½Ð°ÑÐµÐ½Ð¸Ð¹ ÑÐ¿ÑÐ°Ð²Ð»ÑÑÑÐ¸Ñ ÑÐ°Ð·Ð»Ð¸ÑÐ½ÑÐ¼ Ð¾Ð±Ð¾ÑÑÐ´Ð¾Ð²Ð°Ð½Ð¸ÐµÐ¼ ÑÐµÐ³Ð¸ÑÑÑÐ¾Ð² Ð¸ ÑÑÐ·Ð²Ð¸Ð¼Ð¾ÑÑÐµÐ¹, ÑÐ²ÑÐ·Ð°Ð½Ð½ÑÑ Ñ Ð½Ð¸Ð¼Ð¸ ÐºÐ¾Ð¼Ð¿Ð¾Ð½ÐµÐ½ÑÐ¾Ð². Ð ÑÐµÐ·ÑÐ»ÑÑÐ°ÑÐµ Ð¿ÑÐ¾Ð²ÐµÐ´ÐµÐ½Ð½Ð¾Ð¹ ÑÐ°Ð±Ð¾ÑÑ ÑÑÐ¾ÑÐ¼Ð¸ÑÐ¾Ð²Ð°Ð½ Ð¿ÐµÑÐµÑÐµÐ½Ñ Ð±ÐµÐ·Ð¾Ð¿Ð°ÑÐ½ÑÑ Ð´Ð»Ñ Ð¸ÑÐ¿Ð¾Ð»ÑÐ·Ð¾Ð²Ð°Ð½Ð¸Ñ Ð¿Ð°ÑÐ°Ð¼ÐµÑÑÐ¾Ð² ÐºÐ¾Ð½ÑÐ¸Ð³ÑÑÐ°ÑÐ¸Ð¸ ÑÐ°Ð·Ð»Ð¸ÑÐ½ÑÑ ÑÐ·Ð»Ð¾Ð² Ð°Ð¿Ð¿Ð°ÑÐ°ÑÐ½Ð¾Ð³Ð¾ Ð¾Ð±ÐµÑÐ¿ÐµÑÐµÐ½Ð¸Ñ IBM-PC ÑÐ¾Ð²Ð¼ÐµÑÑÐ¸Ð¼Ð¾Ð¹ ÐºÐ¾Ð¼Ð¿ÑÑÑÐµÑÐ½Ð¾Ð¹ ÑÐ¸ÑÑÐµÐ¼Ñ. ÐÐ»Ñ Ð·Ð°ÑÐ¸ÑÑ Ð¸Ð½ÑÐ¾ÑÐ¼Ð°ÑÐ¸Ð¾Ð½Ð½ÑÑ ÑÐ¸ÑÑÐµÐ¼ Ð¾Ñ Ð°Ð¿Ð¿Ð°ÑÐ°ÑÐ½ÑÑ Ð°ÑÐ°Ðº Ð¿ÑÐµÐ´Ð»Ð°Ð³Ð°ÐµÑÑÑ Ð¾Ð±ÑÐ°Ñ Ð¼ÐµÑÐ¾Ð´Ð¸ÐºÐ°, Ð¾ÑÐ½Ð¾Ð²Ð°Ð½Ð½Ð°Ñ Ð½Ð° Ð°Ð½Ð°Ð»Ð¸Ð·Ðµ Ð¸Ð½ÑÐ¾ÑÐ¼Ð°ÑÐ¸Ð¾Ð½Ð½ÑÑ Ð¿ÑÐ¾ÑÐµÑÑÐ¾Ð², Ð¿ÑÐ¾Ð¸ÑÑÐ¾Ð´ÑÑÐ¸Ñ Ð²Ð¾ Ð²ÑÐµÐ¼Ñ Ð°ÑÐ°ÐºÐ¸. Ð Ð°Ð·ÑÐ°Ð±Ð¾ÑÐ°Ð½Ð½Ð°Ñ Ð¼ÐµÑÐ¾Ð´Ð¸ÐºÐ° Ð¿ÑÐµÐ´Ð¾ÑÑÐ°Ð²Ð»ÑÐµÑ ÑÐ½Ð¸Ð²ÐµÑÑÐ°Ð»ÑÐ½ÑÐ¹ ÑÐ¿Ð¾ÑÐ¾Ð± Ð¿Ð¾Ð¸ÑÐºÐ° ÑÑÐ·Ð²Ð¸Ð¼ÑÑ ÐºÐ¾Ð¼Ð¿Ð¾Ð½ÐµÐ½ÑÐ¾Ð² ÐºÐ¾Ð¼Ð¿ÑÑÑÐµÑÐ½Ð¾Ð¹ ÑÐ¸ÑÑÐµÐ¼Ñ, Ð½ÐµÐ¿Ð¾ÑÑÐµÐ´ÑÑÐ²ÐµÐ½Ð½Ð¾ ÑÑÐ°ÑÑÐ²ÑÑÑÐ¸Ñ Ð² ÑÐµÐ°Ð»Ð¸Ð·Ð°ÑÐ¸Ð¸ Ð°ÑÐ°ÐºÐ¸, Ð¸ ÑÑÑÑÐ°Ð½ÐµÐ½Ð¸Ñ Ð½Ð°Ð¹Ð´ÐµÐ½Ð½ÑÑ ÑÑÐ·Ð²Ð¸Ð¼Ð¾ÑÑÐµÐ¹ Ð°Ð¿Ð¿Ð°ÑÐ°ÑÐ½Ð¾Ð³Ð¾ Ð¾Ð±ÐµÑÐ¿ÐµÑÐµÐ½Ð¸Ñ Ð¿ÑÑÐµÐ¼ Ð¸Ð·Ð¼ÐµÐ½ÐµÐ½Ð¸Ñ Ð¿Ð°ÑÐ°Ð¼ÐµÑÑÐ¾Ð² ÐºÐ¾Ð½ÑÐ¸Ð³ÑÑÐ°ÑÐ¸Ð¸ ÑÑÑÑÐ¾Ð¹ÑÑÐ², Ð²ÑÐ¾Ð´ÑÑÐ¸Ñ Ð² ÑÐ¾ÑÑÐ°Ð² Ð·Ð°ÑÐ¸ÑÐ°ÐµÐ¼Ð¾Ð¹ ÑÐ¸ÑÑÐµÐ¼Ñ. Ð¢ÐµÐ¾ÑÐµÑÐ¸ÑÐµÑÐºÐ¸ ÑÐ°ÐºÐ¾Ð¹ Ð¿Ð¾Ð´ÑÐ¾Ð´ Ð¿ÑÐ¸Ð¼ÐµÐ½Ð¸Ð¼ Ð´Ð»Ñ Ð»ÑÐ±Ð¾Ð¹ Ð°Ð¿Ð¿Ð°ÑÐ°ÑÐ½Ð¾Ð¹ Ð¿Ð»Ð°ÑÑÐ¾ÑÐ¼Ñ ÐºÐ¾Ð¼Ð¿ÑÑÑÐµÑÐ½ÑÑ ÑÐ¸ÑÑÐµÐ¼. Ð ÐºÐ°ÑÐµÑÑÐ²Ðµ Ð¿Ð¾Ð´ÑÐ²ÐµÑÐ¶Ð´ÐµÐ½Ð¸Ñ Ð¿ÑÐ¸Ð¼ÐµÐ½Ð¸Ð¼Ð¾ÑÑÐ¸ Ð¿ÑÐµÐ´Ð»Ð°Ð³Ð°ÐµÐ¼Ð¾Ð¹ Ð¼ÐµÑÐ¾Ð´Ð¸ÐºÐ¸ ÑÐ°Ð·ÑÐ°Ð±Ð¾ÑÐ°Ð½ Ð¸ Ð¿ÑÐ¾ÑÐµÑÑÐ¸ÑÐ¾Ð²Ð°Ð½ Ð¿ÑÐ¾ÑÐ¾ÑÐ¸Ð¿ Ð¿ÑÐ¾Ð³ÑÐ°Ð¼Ð¼Ð½Ð¾Ð³Ð¾ ÑÑÐµÐ´ÑÑÐ²Ð°, Ð¾ÑÑÑÐµÑÑÐ²Ð»ÑÑÑÐµÐ³Ð¾ Ð¿Ð¾Ð¸ÑÐº Ð¸ ÑÑÑÑÐ°Ð½ÐµÐ½Ð¸Ðµ ÑÑÐ·Ð²Ð¸Ð¼Ð¾ÑÑÐµÐ¹ Ð°Ð¿Ð¿Ð°ÑÐ°ÑÐ½ÑÑ ÐºÐ¾Ð¼Ð¿Ð»ÐµÐºÑÑÑÑÐ¸Ñ ÐºÐ¾Ð¼Ð¿ÑÑÑÐµÑÐ½Ð¾Ð¹ ÑÐ¸ÑÑÐµÐ¼Ñ.
description: This diploma thesis is devoted to the analysis of security of IBM-PC compatible computer systems based on x86 and x86-64 architectures. During this thesis, all features of hardware attacks, their main goals, the effects, the conditions for their successful outcome and methods of protection against these attacks were researched. As part of the research the system hardware registers, affecting its security, were analyzed and the relationship of the different values ââof the control registers, managing hardware, and vulnerabilities of some related hardware components was discussed in detail. As a result of this work, a list of safe configuration settings of various units of hardware of IBM-PC compatible computer system was formed. To protect information systems against hardware attacks a general methodology based on the analysis of information processes taking place during the attack is proposed. The developed method provides a universal way to search for vulnerable components of a computer system, is directly involved in the attacks, and remove discovered vulnerabilities by modifying the hardware configuration parameters of devices including in the protected system. In theory, this approach is applicable to any hardware platform of computer systems. As a verification of the applicability of the proposed method a prototype of software tool, which search and remove security vulnerabilities of hardware components of a computer system, was developed and tested.