- Patent Title: Detecting security threats by monitoring chains of configuration changes made to basic input/output system (BIOS) or unified extensible firmware interface (UEFI) attributes
-
Application No.: US16410807Application Date: 2019-05-13
-
Publication No.: US11151256B2Publication Date: 2021-10-19
- Inventor: Ricardo L. Martinez , Girish S. Dhoble , Nicholas D. Grobelny
- Applicant: Dell Products, L.P.
- Applicant Address: US TX Round Rock
- Assignee: Dell Products, L.P.
- Current Assignee: Dell Products, L.P.
- Current Assignee Address: US TX Round Rock
- Agency: Fogarty LLP
- Main IPC: G06F21/57
- IPC: G06F21/57 ; G06F21/50 ; G06F21/55 ; G06F9/4401

Abstract:
Systems and methods for detecting IHS attacks by monitoring chains of configuration changes made to Basic Input/Output System (BIOS) or Unified Extensible Firmware Interface (UEFI) attributes are described. In some embodiments, an IHS may include a processor and a memory coupled to the processor, the memory having program instructions stored thereon that, upon execution by the processor, cause the IHS to: monitor a chain of BIOS/UEFI configuration changes; compare the chain of BIOS/UEFI configuration changes against an Indication of Attack (IoA); and report an alert in response to the chain of BIOS/UEFI configuration changes matching the IoA.
Information query