title: ÐÐ°ÑÐ¸ÑÐ° AMD-ÑÐ¸ÑÑÐµÐ¼ Ð¾Ñ UEFI-Ð±ÑÑÐºÐ¸ÑÐ¾Ð² Ð¸ SMM-Ð¸Ð¼Ð¿Ð»Ð°Ð½ÑÐ¾Ð²
title: Ð²ÑÐ¿ÑÑÐºÐ½Ð°Ñ ÐºÐ²Ð°Ð»Ð¸ÑÐ¸ÐºÐ°ÑÐ¸Ð¾Ð½Ð½Ð°Ñ ÑÐ°Ð±Ð¾ÑÐ° ÑÐ¿ÐµÑÐ¸Ð°Ð»Ð¸ÑÑÐ°
titleType: Subtitle
title: Protection of AMD-systems from UEFI-bootkits and SMM-implants
Creators: name: ÐÑÐ¼Ð¾Ð»Ð°ÐµÐ²Ð°, ÐÐ½Ð°ÑÑÐ°ÑÐ¸Ñ
Publisher: name: Ð¡Ð°Ð½ÐºÑ-ÐÐµÑÐµÑÐ±ÑÑÐ³ÑÐºÐ¸Ð¹ Ð¿Ð¾Ð»Ð¸ÑÐµÑÐ½Ð¸ÑÐµÑÐºÐ¸Ð¹ ÑÐ½Ð¸Ð²ÐµÑÑÐ¸ÑÐµÑ ÐÐµÑÑÐ° ÐÐµÐ»Ð¸ÐºÐ¾Ð³Ð¾
Year: 2025
Subjects: amd-ÑÐ¸ÑÑÐµÐ¼Ñ
uefi bios
smm
lpc
smi
Ð±ÑÑÐºÐ¸ÑÑ
Ð°Ð¿Ð¿Ð°ÑÐ°ÑÐ½Ð°Ñ ÐºÐ¾Ð½ÑÐ¸Ð³ÑÑÐ°ÑÐ¸Ñ
Ð¼ÐµÑ Ð°Ð½Ð¸Ð·Ð¼Ñ Ð·Ð°ÑÐ¸ÑÑ
amd-systems
bootkits
hardware configuration
protection mechanisms

description: Ð¦ÐµÐ»ÑÑ ÑÐ°Ð±Ð¾ÑÑ ÑÐ²Ð»ÑÐµÑÑÑ Ð¾Ð±ÐµÑÐ¿ÐµÑÐµÐ½Ð¸Ðµ Ð·Ð°ÑÐ¸ÑÑ ÐÐÐ UEFI BIOS ÐÐ­ÐÐ, Ð¿Ð¾ÑÑÑÐ¾ÐµÐ½Ð½ÑÑ Ð½Ð° Ð±Ð°Ð·Ðµ Ð¿ÑÐ¾ÑÐµÑÑÐ¾ÑÐ¾Ð² AMD, Ð¾Ñ ÑÐ¸ÑÐºÐ° Ð·Ð°ÑÐ°Ð¶ÐµÐ½Ð¸Ñ UEFI-Ð±ÑÑÐºÐ¸ÑÐ°Ð¼Ð¸ (SMM-Ð¸Ð¼Ð¿Ð»Ð°Ð½ÑÐ°Ð¼Ð¸) Ð² ÑÐ»ÐµÐ´ÑÑÐ²Ð¸Ð¸ Ð½ÐµÐºÐ¾ÑÑÐµÐºÑÐ½Ð¾Ð¹ ÐºÐ¾Ð½ÑÐ¸Ð³ÑÑÐ°ÑÐ¸Ð¸ Ð²ÑÑÑÐ¾ÐµÐ½Ð½ÑÑ Ð¼ÐµÑÐ°Ð½Ð¸Ð·Ð¼Ð¾Ð² Ð·Ð°ÑÐ¸ÑÑ. ÐÑÐµÐ´Ð¼ÐµÑÐ¾Ð¼ Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ñ ÑÐ²Ð»ÑÑÑÑÑ Ð¼ÐµÑÐ¾Ð´Ñ Ð²ÑÑÐ²Ð»ÐµÐ½Ð¸Ñ ÐºÐ¾Ð½ÑÐ¸Ð³ÑÑÐ°ÑÐ¸Ð¸ Ð²ÑÑÑÐ¾ÐµÐ½Ð½ÑÑ Ð¼ÐµÑÐ°Ð½Ð¸Ð·Ð¼Ð¾Ð² Ð·Ð°ÑÐ¸ÑÑ ÐÐÐ AMD-ÑÐ¸ÑÑÐµÐ¼. ÐÐ°Ð´Ð°ÑÐ¸, ÑÐµÑÐ°ÐµÐ¼ÑÐµ Ð² ÑÐ¾Ð´Ðµ Ð¸ÑÑÐ»ÐµÐ´Ð¾Ð²Ð°Ð½Ð¸Ñ: 1. ÐÐ·ÑÑÐ¸ÑÑ Ð¾ÑÐ¾Ð±ÐµÐ½Ð½Ð¾ÑÑÐ¸ ÑÑÐ½ÐºÑÐ¸Ð¾Ð½Ð¸ÑÐ¾Ð²Ð°Ð½Ð¸Ñ ÑÐ¾Ð²ÑÐµÐ¼ÐµÐ½Ð½Ð¾Ð¹ Ð°ÑÑÐ¸ÑÐµÐºÑÑÑÑ AMD-ÑÐ¸ÑÑÐµÐ¼ Ð¸ ÐÐÐ UEFI BIOS. 2. ÐÑÐ¾Ð°Ð½Ð°Ð»Ð¸Ð·Ð¸ÑÐ¾Ð²Ð°ÑÑ Ð¾ÑÐ¾Ð±ÐµÐ½Ð½Ð¾ÑÑÐ¸ ÑÑÐ½ÐºÑÐ¸Ð¾Ð½Ð¸ÑÐ¾Ð²Ð°Ð½Ð¸Ñ UEFI-Ð±ÑÑÐºÐ¸ÑÐ¾Ð² Ð¸ SMM-Ð¸Ð¼Ð¿Ð»Ð°Ð½ÑÐ¾Ð², Ð° ÑÐ°ÐºÐ¶Ðµ Ð¿ÑÑÐ¸ Ð¸Ð½ÑÐ¸ÑÐ¸ÑÐ¾Ð²Ð°Ð½Ð¸Ñ ÐÐÐ. 3. ÐÐ·ÑÑÐ¸ÑÑ ÑÑÑÐµÑÑÐ²ÑÑÑÐ¸Ðµ Ð¼ÐµÑÐ°Ð½Ð¸Ð·Ð¼Ñ Ð·Ð°ÑÐ¸ÑÑ ÐÐÐ UEFI BIOS AMD-ÑÐ¸ÑÑÐµÐ¼. 4. Ð Ð°Ð·ÑÐ°Ð±Ð¾ÑÐ°ÑÑ Ð¼ÐµÑÐ¾Ð´Ñ ÑÐ±Ð¾ÑÐ° ÐºÐ¾Ð½ÑÐ¸Ð³ÑÑÐ°ÑÐ¸Ð¸ Ð²ÑÑÐ²Ð»ÐµÐ½Ð½ÑÑ Ð¼ÐµÑÐ°Ð½Ð¸Ð·Ð¼Ð¾Ð² Ð·Ð°ÑÐ¸ÑÑ. 5. Ð Ð°Ð·ÑÐ°Ð±Ð¾ÑÐ°ÑÑ Ð¸ Ð¿ÑÐ¾ÑÐµÑÑÐ¸ÑÐ¾Ð²Ð°ÑÑ ÑÑÐµÐ´ÑÑÐ²Ð¾ Ð·Ð°ÑÐ¸ÑÑ AMD-ÑÐ¸ÑÑÐµÐ¼ Ð¾Ñ ÑÐ¸ÑÐºÐ¾Ð² Ð¸Ð½ÑÐ¸ÑÐ¸ÑÐ¾Ð²Ð°Ð½Ð¸Ñ Ð²ÑÐµÐ´Ð¾Ð½Ð¾ÑÐ½ÑÐ¼ ÐÐ Ð² ÑÐ»ÐµÐ´ÑÑÐ²Ð¸Ð¸ Ð½ÐµÐºÐ¾ÑÑÐµÐºÑÐ½Ð¾Ð¹ ÐºÐ¾Ð½ÑÐ¸Ð³ÑÑÐ°ÑÐ¸Ð¸ Ð²ÑÑÑÐ¾ÐµÐ½Ð½ÑÑ Ð¼ÐµÑÐ°Ð½Ð¸Ð·Ð¼Ð¾Ð² Ð·Ð°ÑÐ¸ÑÑ. Ð ÑÐµÐ·ÑÐ»ÑÑÐ°ÑÐµ ÑÐ°Ð±Ð¾ÑÑ Ð±ÑÐ»Ð¸ ÑÐ°Ð·ÑÐ°Ð±Ð¾ÑÐ°Ð½Ñ Ð¼ÐµÑÐ¾Ð´Ñ ÑÐ±Ð¾ÑÐ° ÐºÐ¾Ð½ÑÐ¸Ð³ÑÑÐ°ÑÐ¸Ð¸ Ð¼ÐµÑÐ°Ð½Ð¸Ð·Ð¼Ð¾Ð² Ð·Ð°ÑÐ¸ÑÑ Ð¸ ÑÑÐµÐ´ÑÑÐ²Ð¾ Ð·Ð°ÑÐ¸ÑÑ AMD-ÑÐ¸ÑÑÐµÐ¼. ÐÐ¾Ð»ÑÑÐµÐ½Ð½ÑÐµ ÑÐµÐ·ÑÐ»ÑÑÐ°ÑÑ Ð¼Ð¾Ð³ÑÑ Ð±ÑÑÑ Ð¸ÑÐ¿Ð¾Ð»ÑÐ·Ð¾Ð²Ð°Ð½Ñ Ð² ÐºÐ°ÑÐµÑÑÐ²Ðµ Ð¾ÑÐ½Ð¾Ð²Ñ Ð´Ð»Ñ Ð¿ÑÐ¾ÐµÐºÑÐ¸ÑÐ¾Ð²Ð°Ð½Ð¸Ñ ÐºÐ¾Ð¼Ð¿Ð»ÐµÐºÑÐ½Ð¾Ð¹ Ð·Ð°ÑÐ¸ÑÑ Ð²ÑÑÑÐ¾ÐµÐ½Ð½Ð¾Ð³Ð¾ ÐÐ x86-64 ÑÐ¸ÑÑÐµÐ¼.
description: The purpose of the study is to provide protection of UEFI BIOS UPOs of PCs based on AMD processors from the risk of infection by UEFI bootkits (SMM-implants) due to incorrect configuration of built-in protection mechanisms. The subject of the work is the methods of detecting the configuration of built-in protection mechanisms of AMD-based UEFI systems. The research set the following goals: 1. Study the peculiarities of modern AMD system architecture and UEFI BIOS. 2. Analyze the peculiarities of UEFI bootkits and SMM-implants functioning, as well as the ways of UEFI BIOS infection. 3. Study the existing protection mechanisms for AMD-systems UEFI BIOS UPO protection. 4. Develop methods of collecting the configuration of the identified protection mechanisms. 5. Develop and test a means to protect AMD-systems from the risk of malware infection due to incorrect configuration of inbuilt protection mechanisms. As a result of the work the methods of collecting the configuration of protection mechanisms and the means of protection of AMD-systems were developed. The obtained results can be used as a basis for designing complex protection of embedded software of x86-64 systems.