SoK: 20 Years of Power, Privilege, and Peril in x86 System Management Mode
summary
Paper systematizes two decades of SMM research into a taxonomy and timeline, consolidating 69 studies and 57 advisories into a classification tree that shows three eras: early configuration bugs, a shift to run-time ChipSec-era tooling, and a recent boom in code and shielding flaws with exponential discovery. Authors publish tables and a live dataset and note only 8 microarchitectural advisories mentioning SMM, call for more firmware analysis tooling, open datasets, and memory-safe firmware to reduce persistent vulnerabilities.
AI-written summary · about
chapters (15)
- 0:00System Management Mode intro
- 1:13How SMM works
- 2:15SMM history and risks
- 3:2020 years of SMM research
- 4:23SMM studies classification
- 6:11Platform config vulnerabilities
- 7:14Run-time vulnerabilities shift
- 7:56Shielding attacks in SMM
- 8:39Persisting vulnerabilities era
- 9:42Future SMM research pillars
- 10:48SMM evaluation needs
- 12:37SMM microarchitectural gaps
- 13:39SMM defensive uses
- 14:42SMM security automation
- 15:26Call to action
related talks
21mSoK: Where’s the “up”?! A Comprehensive (bottom-up) Study on the Security of...
51mFirmware Cartography: Charting the Course for Modern Server Compromise
53mBehind the Scenes of Intel Security and Manageability Engine
51mKeynote |The Microarchitectures That I Saw And The Ones That I Hope To One Day See
23mOverview and Recent Developments: seccomp and Small Linux Security Modules
53mBack To The Future With Platform Security
19mKeynote: MDS, Fallout, Zombieland & Linux
01h 06mIt's Time for Operating Systems to Rediscover Hardware