Goa 2018:- BootStomp: On the Security of Bootloaders in Mobile Devices
Security researchers examine technical aspects of Goa 2018:- BootStomp: On the Security of Bootloaders in Mobile Devices.
Summary
Overview: In our paper we present a novel tool called BootStomp able to identify security vulnerabilities in Android bootloaders (such as memory corruptions) as well as unlocking vulnerabilities. During its evaluation, BootStomp discovered 6 previously unknown vulnerabilities across 4 different bootloaders. Finally BootStomp has been open-sourced to help the security community.
Related talks
Black Hat·36 min
Christopher Wade
Presenters detail vulnerability discovery and exploitation in Breaking Secure Bootloaders.
SAINTCON·53 min
Dmitry Dessiatnikov
Presenters detail vulnerability discovery and exploitation in Dmitry Dessiatnikov - Mobile Device Security in the Enterprise.
Black Hat Europe 2024·38 min
Henrik Ferdinand Nölscher
Engineers explore architecture and security mechanisms for The Bugs in Your Bootloaders: Embedded Device Secure Boot Fails and How to Fix Them.