Proactive Product Security Assurance Avoids Sinkclose | Chips & Salsa | Intel

Опубликовано 19 августа 2024, 19:59

In this episode, Jerry and CRob talk to Intel experts Christopher Domas (finder of Sinkhole in 2015) and Burzin Daruwala about Intel's proactive product security assurance and security hardening efforts around System Management Mode (SMM) over more than a decade. Christopher and Burzin tell us how tools like ChipSEC help ensure the proper security configurations are in place and how ongoing offensive security research helps to keep Intel products safe.

Links: CHIPSEC: github.com/chipsec/chipsec Trusted SMM on the Intel vPro(R) Platform: intel.com/content/dam/www/cent... IOActive Cross Platform Feature Comparison: ioactive.com/intel-commission-... Chris Domas, The Memory Sinkholw, Black Hat 2015: blackhat.com/us-15/briefings.h...

00:56 Introductions
02:17 Why SMM vulnerabilities are important
03:10 Chris explains the 2015 Sinkhole vulnerability he discovered
04:37 Sinkclose has to do with a bit called TClose
06:04 The differences between Sinkhole and Sinkclose
09:16 Burzin talks about the proactive Intel assurance and security hardening efforts over the years
12:46 Chris talks about some of the tooling developed by Intel

Subscribe now to Intel on YouTube: intel.ly/3IX1bN2

About Intel:
Intel, the world leader in silicon innovation, develops technologies, products and initiatives to continually advance how people work and live. Founded in 1968 to build semiconductor memory products, Intel introduced the world's first microprocessor in 1971. This decade, our mission is to create and extend computing technology to connect and enrich the lives of every person on Earth.

Connect with Intel:
Visit Intel WEBSITE: intel.ly/Intel
Follow Intel on X: intel.ly/Twitter
Follow Intel on INSTAGRAM: intel.ly/Instagram
Follow Intel on LINKEDIN: intel.ly/LinkedIn
Follow Intel on TIKTOK: intel.ly/TikTok

Proactive Product Security Assurance Avoids Sinkclose | Chips & Salsa | Intel
youtube.com/intel