Intel VISA: Through the Rabbit Hole
summary
Covers reverse-engineering Intel Platform Controller Hub (PCH) internals using a method called VISA to partially reconstruct PCH architecture and reveal dozens of previously invisible internal devices. Demonstrates concrete techniques for reading signals from internal buses—examples given are IOSF Primary and Side Band buses and the Intel ME Front Side Bus—to access security-sensitive internal devices and data.
AI-written summary · about
chapters (24)
- 0:00Intro
- 2:56black hat Agenda
- 3:23black hat Intel Debugging Tools: Evolution
- 4:08black hat Intel DCI
- 4:55black hat Intel PCH/SOC Hardware Tracing
- 8:17blackhat Intel Trace Hub Software
- 12:48blackhat Intel VISA Schematic
- 13:59black hat Intel VISA Registers Controller (VRC)
- 17:27blackhat Multiplexers & Groups
- 18:15bllokhat Intel VISA Control Registers
- 19:30black hat Intel VISA Multiplexer
- 23:47black hat ODLA Tracing: Step by Step
- 26:31blackhat Intel On-Chip System Fabric
- 31:27blackhat IOSF Side Band Bus
- 33:56black hat IOSF example for LBG Chipset
- 40:19black hat DAL: Encrypted XML Files
- 42:52blackhat Hardware Security Levels
- 44:32black hat Intel VISA & DFx Fuses
- 49:15black hat Unfused Key
- 49:32black hat Unlock Token
- 50:39blok hat Unlock: Traffic Light Passwords
- 52:00blackhat JTAG Password Live Cycle
- 53:36blackhat Indirect Evidence
- 54:53blok hat Fault Injection
related talks
21mOpen Source IC Design and Hardware Reverse Engineering Or: How I Learned to Stop...
01h 46mTutorial: Introduction to Reverse Engineering
43mThe Tao of Hardware the Te of Implants
36mLost Control-Breaking Hardware-Assisted Kernel Control-Flow Integrity with Page-Oriented Programming
51mKeynote |The Microarchitectures That I Saw And The Ones That I Hope To One Day See
01h 09mDeobfuscate UEFI/BIOS Malware And Virtualized Packers
53mBack To The Future With Platform Security
47mHow to Hack a Turned-Off Computer, or Running Unsigned Code in Intel Management Engine