新手学习UEFI之初识UEFI

刚开始学习开发UEFI,分享以下学习过程,有不足之处,还请大佬指正

一、什么是UEFI?

UEFI:

  • 英文全称:Unified Extensible Firmware Interface,
  • 中文名字:统一可扩展固件接口;
  • 它定义了操作系统与平台固件之间的接口,
  • 它是BIOS的替代品。

二、UEFI 的系统组成

  • UEFI提供给操作系统的接口包括启动服务BS和运行时服务RT以及隐藏在BS之后的丰富的Protocol。
  • BS和RT在C语言中以结构体的形式存在。
    在这里插入图片描述

三、UEFI系统的启动过程

SEC安全验证
PEI前期初始化
DXE驱动执行环境
BDS启动设备选择
TSL操作系统加载前期
RT运行时
AL系统灾难恢复期

其中,

  • 前三个阶段是UEFI初始化阶段,DXE阶段结束后,UEFI环境准备完毕。
  • BDS和TSL是操作系统加载器作为UEFI应用程序运行的阶段。
  • 操作系统加载器调用ExitBootServices( )服务后进入RT阶段,RT阶段包括操作系统加载器后期和操作系统运行期。一旦ExitBootServices( )服务被调用,一切EFI Boot Services就不能再被调用,而只能调用EFI Runtime Services。
  • 只有当系统硬件或操作系统出现严重错误不能继续正常运行时,固件回尝试修复错误,这是系统进入AL期。
    在这里插入图片描述
    在这里插入图片描述

名词解释

  • UEFI(Unified Extensible Firmware Interface)【统一可扩展固件接口】
  • BS(Boot Services)【启动服务】
  • RT(Runtime Service)【运行时服务】
  • SEC(Security Phase)安全认证
  • PEI(Pre-EFI Initialization)UEFI 前期初始化
  • DXE(Driver Excution Environment)驱动执行环境
  • BSD(Boot Device Selection)启动设备选择
  • TSL(Transient System Load)操作系统加载器
  • RT(Run Time)系统运行时
  • AL(After Life)
BIOS-UEFI安全培训包 Training: Security of BIOS/UEFI System Firmware from Attacker and Defender Perspectives This repository contains materials for a hands-on training Security of BIOS/UEFI System Firmware from Attacker and Defender Perspectives A variety of attacks targeting system firmware have been discussed publicly, drawing attention to the pre-boot and firmware components of the platform such as BIOS and SMM, OS loaders and secure booting. This training will detail and organize objectives, attack vectors, vulnerabilities and exploits against various types of system firmware such as legacy BIOS, SMI handlers and UEFI based firmware, mitigations as well as tools and methods available to analyze security of such firmware components. It will also detail protections available in hardware and in firmware such as Secure Boot implemented by modern operating systems against bootkits. The training includes theoretical material describing a structured approach to system firmware security analysis and mitigations as well as many hands-on exercises to test system firmware for vulnerabilities. After the training you should have basic understanding of platform hardware components and various types of system firmware, security objectives and attacks against system firmware, mitigations available in hardware and firmware. You should be able to apply this knowledge in practice to identify vulnerabilities in BIOS and perform forensic analysis of the firmware. Materials Module 0 Introduction to Firmware Security Module 1 BIOS and UEFI Firmware Fundamentals Module 2 Bootkits and UEFI Secure Boot Module 3 Hands-On Platform Hardware and Firmware Module 4 System Firmware Attack Vectors Module 5 Hands-On EFI Environment Module 6 Mitigations Module 7 System Firmware Forensics Miscellaneous Materials
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值