NIST SP800-147b DRAFT BIOS Protection Guidelines for Servers

　こんにちは，丸山満彦です。2012.08.05のまるちゃんTwitterから。。。
＝＝＝＝＝

　
■NIST SP800

●NIST SP800-147b DRAFT BIOS Protection Guidelines for Servers

＝＝＝＝＝
Executive Summary
1. Introduction
　1.1 Purpose and Scope
　1.2 Audience
　1.3 Document Structure

2. Background
　2.1 System BIOS
　2.2 Server Architectures
　2.3 System BIOS Update Mechanisms
　2.4 Threats to the System BIOS
　2.5 Root of Trust for Update

3. BIOS Security Principles
　3.1 BIOS Update Authentication
　3.2 Secure Local Update
　3.3 Firmware Integrity Protection
　3.4 Non-Bypassability

4. Security Guidelines by Update Mechanism
　4.1 Update Mechanism 1: Secure BIOS Update at Anytime
　4.2 Update Mechanism 2: Secure BIOS Update at Reboot
　4.3 Update Mechanism 3: Secure BIOS Update Requiring Verification at Boot

5. Guidelines for Service Processors
　5.1 Service Processor as a Root of Trust
　5.2 Non-Bypassability of BIOS Protections by Service Processor

List of Appendices
　Appendix A— Summary of Requirements
　Appendix B— Example of Update Mechanism 1
　Appendix C— Example of Update Mechanism 2
　Appendix D— Example of Update Mechanism 3
　Appendix E— Glossary
　Appendix F— Acronyms and Abbreviations
　Appendix G— References
＝＝＝＝＝