Firmware Binary Scanning Before Programmable Device Updates
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems fail to adequately protect devices in a host computer system from malicious code embedded in firmware updates, particularly for accelerators like FPGAs and GPUs, as current security measures do not verify the actual content of firmware images, leaving them vulnerable to security breaches.
Innovation Solution
Implementing a Baseboard Management Controller (BMC) that scans firmware images for malicious code using a binary scanning application before updating devices, providing an additional layer of security by blocking the update if malicious code is detected.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If firmware images are updated without scanning for malicious code, then device functionality is maintained, but security vulnerability increases
Solution Approach 1:
The patent applies preliminary action by scanning the firmware image for malicious code before the actual firmware update is performed. The BMC executes a binary scanning application on the firmware image to detect malicious code, and only if the scan is clean does it proceed with the update. This prevents security vulnerabilities from being introduced while maintaining a controlled update process.
Solution Approach 2:
The patent introduces an intermediary scanning mechanism between the firmware image and the device update process. The BMC acts as an intermediary that mediates the update by first scanning the firmware image using a binary scanning application, then deciding whether to allow the update based on the scan results. This intermediary step enhances security without completely blocking the update functionality.
2Reliability
If firmware images are scanned for malicious code, then security is enhanced, but update time increases
Solution Approach 1:
The scanning operation is performed as a preliminary action before the actual firmware update. The BMC scans the firmware image in advance to detect malicious code, and only if the scan succeeds does it proceed with the update. This preliminary scanning approach ensures security is verified beforehand, preventing failed updates due to malicious code while minimizing impact on overall update time.
3Reliability
If firmware images are verified before updating, then integrity is ensured, but system complexity increases
Solution Approach 1:
The patent uses the BMC as an intermediary verification system that manages the firmware update process. The BMC retrieves the firmware image, executes a binary scanning application to verify integrity and detect malicious code, and then decides whether to allow the update. This intermediary verification layer ensures firmware integrity without requiring complex changes to the core device architecture.
Data Source
AI summary
A BMC determines that a binary image for a device of a host computer is to be updated. The BMC scans the binary image for malicious code using a binary scanning application. The BMC prevents updating the device with the binary image in response to detecting malicious code in the binary image during the scanning.