Open Access. Powered by Scholars. Published by Universities.®
Articles 1 - 1 of 1
Full-Text Articles in Computer Engineering
Applying The Principle Of Least Privilege To System Management Interrupt Handlers With The Intel Smi Transfer Monitor, Brian Delgado, Tejaswini Vibhute, Karen L. Karavanic
Applying The Principle Of Least Privilege To System Management Interrupt Handlers With The Intel Smi Transfer Monitor, Brian Delgado, Tejaswini Vibhute, Karen L. Karavanic
Computer Science Faculty Publications and Presentations
Recent years have seen a growing concern over System Management Mode (SMM) and its broad access to platform resources. The SMI Transfer Monitor (STM) is Intel’s most powerful executing CPU context. The STM is a firmware-based hypervisor that applies the principle of least privilege to powerful System Management Interrupt (SMI) handlers that control runtime firmware. These handlers have traditionally had full access to memory as well as the register state of applications and kernel code even when their functionality did not require it. The STM has been been enabled for UEFI and, most recently, coreboot firmware, adding protection against runtime …