Recovering from Compromised System Boot Code

摘要

In a state of a system in which a processor of the system is not accessing a first memory, a controller in the system determines whether system boot code from the first memory in the system is compromised, wherein the first memory is accessible by the processor and the controller over a bus. In response to determining that the system boot code is compromised, the controller retrieves system boot code from a second memory in the computing device to replace the system boot code in the first memory, where the second memory is electrically isolated from the bus and is inaccessible by the processor.

主权项

1. A computing device comprising:
a processor; a controller; a first memory storing system boot code, wherein the first memory is accessible by both the processor and the controller over a bus; a second memory electrically isolated from the bus and storing a system boot code copy, wherein the second memory is accessible by the controller but inaccessible by the processor, wherein the controller is to, during a period in which the processor is not accessing the first memory, replace the system boot code in the first memory with the system boot code copy from the second memory.