Главная
Study mode:
on
1
Intro
2
black hat ME Position in Computer System
3
black hat MFS Partition Layout
4
black hat Flash Memory Characteristics
5
black hat Flash File System Design Goals
6
black hat Recommended Materials
7
black hat MFS Pagination
8
black hat Page Chunks Single Chunk (66 bytes)
9
black hat System Pages
10
black hat Data Pages
11
black hat Data Area Reconstruction
12
black hat System Area Reconstruction
13
black hat Data Extraction from Files
14
black hat MFS Templates from fit.exe
15
black hat Special Files
16
black hat intel.cfg (fitc.cfg) Structure
17
black hat intel.cfg Partial Dump
18
black hat MFS Directory
19
black hat Integrity, Encryption, Anti-Replay
20
black hat FS Security Keys
21
black hat Crypto Engine / Usage Practices
22
black hat Key Derivation and Usage
23
black hat File System Types in VFS
24
black hat Black Hat Sound Bytes
Description:
Explore the intricacies of Intel Management Engine's flash file system in this 53-minute Black Hat conference talk. Delve into the details of how ME 11.x stores its state on flash memory and examine other file system types supported by ME 11.x. Learn about the MFS partition layout, flash memory characteristics, and file system design goals. Discover the pagination system, including page chunks and types of pages. Understand the process of data area and system area reconstruction, as well as data extraction from files. Examine MFS templates, special files, and the structure of intel.cfg. Gain insights into the directory structure, security measures including integrity, encryption, and anti-replay mechanisms. Explore the crypto engine, key derivation, and usage practices. Investigate the various file system types in VFS. Presented by Dmitry Sklyarov, this talk provides a comprehensive look at the inner workings of Intel ME's flash file system.

Intel ME - Flash File System Explained

Black Hat
Add to list
0:00 / 0:00