2018-09-15 – 14:00-14:15 (Africa/Abidjan), Lightning
In this presentation, we would like to present how BITS and CHIPSEC can be utilized on top of coreboot enabled platform to verify the quality of underlying firmware.
Firmware security is mostly about validation and formal development processes. To achieve some level of confidence about firmware implementation quality various tools were developed, of which most notable are CHIPSEC and BITS.
BITS (BIOS Implementation Test Suite) consist of a GRUB2 bootloader extended with runtime Python support.
CHIPSEC is a Platform Security Assessment Framework which mostly focuses on platform configuration but can also be used for other purposes (e.g. verification of Spectre mitigation presence).
We would like to present what issues firmware developers may face and what we were able to achieve at this ground using BITS and CHIPSEC for validation of PC Engines apu2 and MinnowBoard Turbot platform. We want to present what modifications are required to integrated Python code along with CHIPSEC and BITS scripts. We also would like to demonstrate practical usage of mentioned frameworks by showing short demo.
Piotr Król is Founder and Embedded Systems Consultant at 3mdeb - licensed provider of coreboot consulting services. He received M. Sc. in Computer Systems Networking and Telecommunication from Gdańsk University of Technology. Piotr worked as Storage Controllers Validation Engineer and BIOS Software Engineer in Intel Technology Poland for over 7 years. After leaving Intel he
created his own consulting business focused on Embedded Firmware (coreboot, UEFI/EDK2/BIOS, trainings and security) and Embedded Linux (Yocto, Linux Device Drivers, Qt/C++/Go/Python applications) . He is passionate about building firmware that enables advanced hardware features and follows best security practices. His team maintains PC Engines platforms in coreboot and actively
work on and contribute to Open Source Firmware. Feel free to contact Piotr if you have any questions about related topic.