Building Secure Firmware: Armoring the Foundation of the Platform

© Jiewen Yao and Vincent Zimmer 2020

J. Yao, V. ZimmerBuilding Secure Firmwarehttps://doi.org/10.1007/978-1-4842-6106-4_2

2. Proactive Firmware Security Development

Jiewen Yao¹  and Vincent Zimmer²

(1)

Shanghai, China

(2)

Issaquah, WA, USA

 

Firmware development is similar to software development. Almost all of the software security development lifecycle (SDL) practices can be applied to firmware development. Figure 2-1 shows the main activities that may be involved in the firmware development.

Figure 2-1

Security Activities in the Software SDL

Requirement Phase

Collecting the security requirement is the first step. Without the clear requirement, we don’t know ...