D3-PFV Peripheral Firmware Verification

Cryptographically verifying peripheral firmware integrity.

How it works Peripheral firmware is collected and analyzed on a host either periodically or on demand. This information may be collected for future comparisons. Changes in firmware hash values may indicate that the firmware has been tampered with or that firmware images are not maintained to current baselined versions, or even known vulnerable versions are deployed. Considerations • Trust baselines will need to be generated for specific devices • Changes to trusted configurations will need to be managed across the enterprise