Firmware is Foundational to Security

To understand the foundational nature of firmware, it is first necessary to understand what firmware is and how its protection affects the overall security of a hardware endpoint.

Firmware Basics

Firmware is the very first software that comes up when a device is powered on. It makes sure all the hardware and peripherals are functioning properly and then it launches the operating system. The figure shows firmware’s place in an endpoint’s tech stack. It has been commonly called BIOS, but modern firmware present in nearly all endpoints is based on the UEFI (Unified Extensible Firmware Interface) standard. Phoenix Technologies was a co-founder of the UEFI Forum and currently sits on the board and also chairs the UEFI Security Response Team (USRT).

Without UEFI firmware, an endpoint would not be able to operate and would be nothing more than an expensive paperweight.

Why Firmware is a Prime Target

Given UEFI BIOS firmware’s critical position as the software that controls every component of an endpoint, it is not surprising that hackers target firmware with great intensity. By compromising a device’s firmware, a malicious actor can gain complete control of the machine including launching a rogue operating system. Furthermore, because UEFI firmware sits in its own dedicated flash memory on the motherboard, reinstalling the OS or even swapping out the hard drive will not rid the endpoint of infected firmware.

An attacker that hijacks firmware can easily eavesdrop, destroy or exfiltrate data, launch a rogue operating system or even render an endpoint inoperable.

How Firmware Fits into Zero Trust

The current industry focus on Zero Trust (ZT) should also encompass firmware, though many Zero Trust models and solutions do not. This is a mistake, as firmware is the root of trust for any endpoint. Since it is the first software loaded, compromised firmware can become an undetectable backdoor—an invisible gateway for implanting a rootkit to hijack the OS or network communications. From a ZT perspective, endpoint hardware should not trust firmware by default. Any serious discussions around ZT must include processes that regularly re-verify the firmware root of trust.

Suite of Features

Firmware is Foundational to Security

To understand the foundational nature of firmware, it is first necessary to understand what firmware is and how its protection affects the overall security of a hardware endpoint.

Firmware Basics

Why Firmware is a Prime Target

How Firmware Fits into Zero Trust