Microsoft Releases Info on Protecting BitLocker From DMA Attacks

guest · Nov 8, 2018

Microsoft Releases Info on Protecting BitLocker From DMA Attacks
November 8, 2018
https://www.bleepingcomputer.com/ne...nfo-on-protecting-bitlocker-from-dma-attacks/

[...] Microsoft released a support bulletin describing how to protect BitLocker from 1394 & Thunderbolt DMA attacks.

When a BitLocker protected device is unlocked, the encryption key is stored in the computer's memory. Attackers can then plug a specially crafted 1394 or Thunderbolt device into an BitLocker protected computer's external port so that it can search the memory for the encryption key and steal it.

In the newly released support document, Microsoft outlines various ways that Windows 10 users can protect themselves from these types of attacks. This includes utilizing the Kernel DMA Protection feature built into Windows 10 1803 if available. For those whose hardware does not support this feature, Microsoft has provided other methods that can be used to mitigate DMA attacks.
Windows 10 1803 Kernel DMA Protection
With the release of Windows 10 build 1803, Microsoft added a new feature called Kernel DMA Protection that blocks Thunderbolt 3 connected devices from performing system wide Direct Memory Access unless certain conditions are met.
Click to expand...

Blocking the SBP-2 driver and Thunderbolt controllers to reduce 1394 DMA and Thunderbolt DMA threats to BitLocker
https://support.microsoft.com/en-us...-and-thunderbolt-controllers-to-reduce-1394-d
Click to expand...

Log in or Sign up

Microsoft Releases Info on Protecting BitLocker From DMA Attacks

guest Guest

Log in or Sign up

Microsoft Releases Info on Protecting BitLocker From DMA Attacks

guest Guest

Useful Searches