BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

Appendix D References

NIST platform security: roots of trust, firmware and secure enclaves SP 800-147
All changes in this version
first version loaded Appendix D References

Title

References

Control

The list below provides references for this publication.

[Duarte08] G. Duarte. “How Computers Boot Up.” 5 June 2008. http://www.duartes.org/gustavo/blog/post/how-computers-boot-up

[EFI] EFI 1.10 Specification . Intel. 1 November 2003. http://www.intel.com/technology/efi/

[EmSp08] Shawn Embleton, Sherri Sparks, and Cliff C. Zou. "SMM Rootkits: A New Breed of OS Independent Malware," Proceedings of 4th International Conference on Security and Privacy in Communication Networks (SecureComm) , Istanbul, Turkey, September 22-25, 2008.

[FIPS180-3] FIPS 180-3, Secure Hash Standard . October 2008.

[FIPS186-3] FIPS 186-3, Digital Signature Standard. June 2009.

[DuGr09] Loïc Duflot, Olivier Grumelard, Olivier Levillain and Benjamin Morin. “ACPI and SMI handlers: some limits to trusted computing.” Journal in Computer Virology . Volume 6, Number 4, 353-374.

[Graw09] D. Grawrock. Dynamics of a Trusted Platform: A Building Block Approach . Hillsboro, OR: Intel Press, 2009.

[Heas07a] J. Heasman. “Firmware Rootkits: A Threat to the Enterprise.” Black Hat DC. Washington, DC. 28 February 2007. http://www.nccgroup.com/Libraries/Document_Downloads/02_07_Firmware_Rootkits_ The_Threat_to_the_Enterprise_Black_Hat_Washington_2007_sflb.sflb.ashx

[Heas07b] J. Heasman. “Hacking the Extensible Firmware Interface.” Black Hat USA . Las Vegas, NV. 2 August 2007. https://www.blackhat.com/presentations/bh-usa - 07/Heasman/Presentation/bh-usa-07-heasman.pdf

[Intel03] Intel Platform Innovation Framework for EFI- Architecture Specification v0.9 . Intel. September 2003. http://www.intel.com/technology/framework/

[KGH09] A. Kumar, G. Purushottam, and Y. Saint-Hilaire. Active Platform Management Demystified . Hillsboro, OR: Intel Press, 2009.

[Sal07] Salihun, Darmawan. BIOS Disassembly Ninjutsu Uncovered . Wayne, PA: A-LIST, 2007.

[SaOr09] A. Sacco, A. Ortéga. “Persistant BIOS Infection.” Phrack . Issue 66. 6 November 2009. http://www.phrack.com/issues.html?issue=66&id=7

[SP800-57] NIST SP 800-57, Recommendation for Key Management – Part 1: General . March 2007.

[SP800-61] NIST SP 800-61rev1, Computer Security Incident Handling Guide. March 2008.

[SP800-89] NIST SP 800-89, Recommendation for Obtaining Assurances for Digital Signature Applications. November 2006. [SP800-128] Draft NIST SP 800-128, Guide for Security Configuration Management of Information Systems. March 2010.

[SP800-131A] NIST SP 800-131A, Transitions: Recommendation for Transitioning the Use of Cryptographic Algorithms and Key Lengths . January 2011.

[Sym02] W95.CIH Technical Details . Symantec. 25 April 2002. http://www.symantec.com/security_response/writeup.jsp?docid=2000-122010-2655-99

[TCG05] PC Client Work Group Specific Implementation Specification for Conventional Bios Specification, Version 1.2 . Trusted Computing Group. July 2005. http://www.trustedcomputinggroup.org/resources/pc_client_work_group_specific_imple mentation_specification_for_conventional_bios_specification_version_12

[UEFI] UEFI Specification Version 2.3 . Unified EFI Forum. May 2009. http://www.uefi.org/specs/

[Wech09] F. Wecherowski. “A Real SMM Rootkit: Reversing and Hooking BIOS SMI Handlers.” Phrack . Issue 66. 6 November 2009. http://www.phrack.com/issues.html?issue=66&id=11

[WoTe09] R. Wojtczuk and A. Tereshkin. “Attacking Intel BIOS.” Black Hat USA . Las Vegas, NV. 30 July 2009. http://www.blackhat.com/presentations/bh-usa - 09/WOJTCZUK/BHUSA09-Wojtczuk-AtkIntelBios-SLIDES.pdf