Firmware Protection Against DOS Attacks via Selective Write Guard
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing storage device technologies are vulnerable to Denial of Service (DOS) attacks, leading to unforeseen errors and failures when attempting to access firmware, as they often isolate or power off the device, disrupting management capabilities.
Innovation Solution
Implement a firmware protection method that monitors access requests, performs write protection on specific regions of the storage device, maintains power supply, and allows access to the firmware during DOS attacks, thereby reducing the risk of errors and failures.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the storage device is isolated or powered off when a DOS attack is detected, then the security against DOS attacks is improved, but the firmware cannot access the storage device causing management failure and firmware failure
Solution Approach 1:
The storage device is divided into multiple regions, with the first region designated for firmware storage and the second region for other data. When a DOS attack is detected, write protection is applied only to the first region, allowing firmware to remain accessible while protecting critical firmware integrity. This segmentation enables selective protection without complete isolation.
Solution Approach 2:
Different protection strategies are applied to different regions of the storage device. The first region (firmware region) maintains read accessibility even during DOS attacks, while the second region can be fully protected or isolated. This local differentiation of protection quality ensures firmware manageability is preserved while security is enhanced.
2Reliability
If write protection is performed on the entire storage device when a DOS attack is detected, then the protection against data corruption is improved, but the firmware cannot be updated or modified causing loss of manageability
Solution Approach 1:
The storage device is divided into a first region for firmware storage and a second region for other purposes. Write protection is selectively applied only to the first region during DOS attacks, preserving firmware integrity while leaving the second region accessible for normal operations and future firmware updates when appropriate.
Solution Approach 2:
The protection state of the storage device regions is dynamically adjusted based on the detected attack type. During DOS attacks, the first region enters write-protection mode while maintaining read access. This dynamic state change allows the system to adapt protection levels to current security threats while preserving necessary functionality.
Data Source
AI summary
A firmware protection method includes monitoring an access request to a storage device and obtaining access request data. The storage device is configured to store firmware. The method further includes, in response to the access request data, when determining that the access request is a denial-of-service (DOS) attack, performing write protection on a first region of the storage device, maintaining the power supply to the storage device, and allowing the storage device to be accessible by the firmware.