Access Control Beyond BIOS Using the Unified Extensible Firmware Interface

摘要

This paper describe access control for a platform containing an implementation of Unified Extensible Firmware Interface (UEFI) -based platform code. This access control entails full mediation using a fine-grain policy mechanism. Given the different market segments and platform types for which UEFI solutions can be composed, this policy mechanism is flexible enough to allow for high-assurance, MAC deployments all the way to open platforms, DAC usage models.