Detection and Mitigation of Malicious Modifications on the Minnowboard Turbot

Malicious modifications affecting the hardware or firmware of Commercial off-the-shelf (COTS) devices is far more persistent than traditional software-based malware, and can be hard to detect and remove once the devices are deployed in an organization. This research analyze and propose cost effectiv...

Descripción completa

Guardado en:
Detalles Bibliográficos
Autores Principales: Koch, Bryan, Liu, Bohuai, Mera, Alejandro
Otros Autores: Roach, Austin
Formato: Tesis de Maestría
Lenguaje:eng
Publicado: Boston / Northeastern University 2017
Materias:
Acceso en línea:http://repositorio.educacionsuperior.gob.ec/handle/28000/4298
Etiquetas: Agregar Etiqueta
Sin Etiquetas, Sea el primero en etiquetar este registro!
Descripción
Sumario:Malicious modifications affecting the hardware or firmware of Commercial off-the-shelf (COTS) devices is far more persistent than traditional software-based malware, and can be hard to detect and remove once the devices are deployed in an organization. This research analyze and propose cost effective procedures to detect and mitigate malicious modifications associated to the supply chain of the Minnowboard Turbot, an opensource COTS device. Findings demonstrate that screening hardware with existing quality assurance techniques and installing clean firmware on the device can successfully mitigate most of supply chain risks. These procedures and risk analysis provide a road map for identifying supply chain risk on other commercial off-the-shelf devices.