Security Weekly
Below the Surface: The Supply Chain Security PodcastSubscribe
Vulnerability Management, Zero trust, Critical Infrastructure Security

Armoring the Unified Extensible Firmware Interface (UEFI) – Vincent Zimmer – BTS #6

This session will provide an overview of the history of host firmware, or BIOS, focusing on the arc of the Unified Extensible Firmware Interface. It will include the development of defenses like UEFI Secure Boot and the challenges in scaling assurance across a broad ecosystem. It will close on works-in-progress and opportunities to build upon the school-of-hard-knocks learnings in this space.

This segment is sponsored by Eclypsium. Visit https://securityweekly.com/eclypsium to learn more about them!

Sponsored By

Eclypsium
Full episode and show notes

Guest

Vincent Zimmer
Senior Principal Engineer at Intel Corporation

Vincent Zimmer is a senior principal engineer at Intel Corporation. He has been engaged as a firmware developer and architect for over 30 years. Vincent presently leads the UEFI Security sub team. Vincent has presented at industry events such as the Open Source Firmware Conference, Linux Fest Northwest, Intel Developer Forum, UEFI Plugfest, Open Compute Project Summit, BlackHat Las Vegas, BSides Seattle, Toorcamp, and Cansecwest. Vincent has also co-authored several papers, IETF RFC, white papers, and a half-dozen books on firmware, including “Building Secure Firmware.” Vincent is a co-inventor on over 1000 issued patents worldwide.

Hosts

Principal Security Evangelist at Eclypsium
Principal Cyber Strategist at Eclypsium

Related

5G Hackathons – Casey Ellis – BTS #28

Casey recently was involved in an event that brought hackers and 5G technology together, tune-in to learn about the results and how we can use bug bounty programs to improve the security of "things". This segment is sponsored by Eclypsium. Visit https://securityweekly.com/eclypsium to learn more about them!