Publicação
Vulnerabilities in baseboard management controllers: risks and mitigation strategies in the IIoT environment
| Resumo: | Vulnerabilities in Baseboard Management Controllers (BMCs) have a high impact on the Industrial Internet of Things (IIoT) environment. Recently, a set of vulnerabilities in BMCs disclosed by Nozomi Networks expose Operational Technology (OT) and IIoT networks to remote attacks. This paper reviews a set of vulnerabilities in BMC affecting IIoT devices and discusses the risks and implications of the vulnerabilities found, and how they can be mitigated. The discovery of vulnerabilities in BMC highlights the urgent need for a comprehensive and multifaceted approach to securing the IIoT environment. It is concluded that a general improvement in the security of BMC could be achieved by adopting the open-source philosophy and standardizing the hardware interface. |
|---|---|
| Autores principais: | Barreto, Jackson |
| Outros Autores: | Lopes, Sérgio Ivan; Pinto, Pedro |
| Assunto: | BMC (Baseboard Management Controller) Firmware vulnerabilities IIoT (Industrial Internet of Things) |
| Ano: | 2023 |
| País: | Portugal |
| Tipo de documento: | documento de conferência |
| Tipo de acesso: | acesso aberto |
| Instituição associada: | Instituto Politécnico de Viana do Castelo |
| Idioma: | inglês |
| Origem: | Repositório Científico IPVC |
| _version_ | 1876557211325431808 |
|---|---|
| author | Barreto, Jackson |
| author2 | Lopes, Sérgio Ivan Pinto, Pedro |
| author2_role | author author |
| author_facet | Barreto, Jackson Lopes, Sérgio Ivan Pinto, Pedro |
| author_role | author |
| country_str | PT |
| creators_json_txt | [{\"Person.name\":\"Barreto, Jackson\"},{\"Person.name\":\"Lopes, Sérgio Ivan\"},{\"Person.name\":\"Pinto, Pedro\"}] |
| datacite.creators.creator.creatorName.fl_str_mv | Barreto, Jackson Lopes, Sérgio Ivan Pinto, Pedro |
| datacite.date.Accepted.fl_str_mv | 2023-07-11T00:00:00Z |
| datacite.date.available.fl_str_mv | 2023-12-04T16:19:14Z |
| datacite.date.embargoed.fl_str_mv | 2023-12-04T16:19:14Z |
| datacite.rights.fl_str_mv | http://purl.org/coar/access_right/c_abf2 |
| datacite.subjects.subject.fl_str_mv | BMC (Baseboard Management Controller) Firmware vulnerabilities IIoT (Industrial Internet of Things) |
| datacite.titles.title.fl_str_mv | Vulnerabilities in baseboard management controllers: risks and mitigation strategies in the IIoT environment |
| dc.creator.none.fl_str_mv | Barreto, Jackson Lopes, Sérgio Ivan Pinto, Pedro |
| dc.date.Accepted.fl_str_mv | 2023-07-11T00:00:00Z |
| dc.date.available.fl_str_mv | 2023-12-04T16:19:14Z |
| dc.date.embargoed.fl_str_mv | 2023-12-04T16:19:14Z |
| dc.format.none.fl_str_mv | application/pdf |
| dc.identifier.none.fl_str_mv | http://hdl.handle.net/20.500.11960/3747 |
| dc.language.none.fl_str_mv | eng |
| dc.publisher.none.fl_str_mv | Instituto Politécnico de Bragança |
| dc.rights.none.fl_str_mv | http://purl.org/coar/access_right/c_abf2 |
| dc.subject.none.fl_str_mv | BMC (Baseboard Management Controller) Firmware vulnerabilities IIoT (Industrial Internet of Things) |
| dc.title.fl_str_mv | Vulnerabilities in baseboard management controllers: risks and mitigation strategies in the IIoT environment |
| dc.type.none.fl_str_mv | http://purl.org/coar/resource_type/c_c94f |
| description | Vulnerabilities in Baseboard Management Controllers (BMCs) have a high impact on the Industrial Internet of Things (IIoT) environment. Recently, a set of vulnerabilities in BMCs disclosed by Nozomi Networks expose Operational Technology (OT) and IIoT networks to remote attacks. This paper reviews a set of vulnerabilities in BMC affecting IIoT devices and discusses the risks and implications of the vulnerabilities found, and how they can be mitigated. The discovery of vulnerabilities in BMC highlights the urgent need for a comprehensive and multifaceted approach to securing the IIoT environment. It is concluded that a general improvement in the security of BMC could be achieved by adopting the open-source philosophy and standardizing the hardware interface. |
| dirty | 0 |
| eu_rights_str_mv | openAccess |
| format | conferenceObject |
| id | ripvc_514715bb220b9c11ff7cb89a3eb70f51 |
| identifier.url.fl_str_mv | http://hdl.handle.net/20.500.11960/3747 |
| inst_facet_str | urn:organizationAcronym:ipvc{{{_:::_}}}Instituto Politécnico de Viana do Castelo |
| instacron_str | ipvc |
| institution | Instituto Politécnico de Viana do Castelo |
| instname_str | Instituto Politécnico de Viana do Castelo |
| language | eng |
| network_acronym_str | ripvc |
| network_name_str | Repositório Científico IPVC |
| oai_identifier_str | oai:repositorio.ipvc.pt:20.500.11960/3747 |
| organization_str_mv | urn:organizationAcronym:ipvc |
| person_str_mv | Barreto, Jackson Lopes, Sérgio Ivan Pinto, Pedro |
| publishDate | 2023 |
| publisher.none.fl_str_mv | Instituto Politécnico de Bragança |
| repo_facet_str | urn:repositoryAcronym:ripvc{{{_:::_}}}Repositório Científico IPVC |
| reponame_str | Repositório Científico IPVC |
| repository_id_str | urn:repositoryAcronym:ripvc |
| service_str_mv | urn:repositoryAcronym:ripvc |
| spelling | pt_PTVulnerabilities in Baseboard Management Controllers (BMCs) have a high impact on the Industrial Internet of Things (IIoT) environment. Recently, a set of vulnerabilities in BMCs disclosed by Nozomi Networks expose Operational Technology (OT) and IIoT networks to remote attacks. This paper reviews a set of vulnerabilities in BMC affecting IIoT devices and discusses the risks and implications of the vulnerabilities found, and how they can be mitigated. The discovery of vulnerabilities in BMC highlights the urgent need for a comprehensive and multifaceted approach to securing the IIoT environment. It is concluded that a general improvement in the security of BMC could be achieved by adopting the open-source philosophy and standardizing the hardware interface.application/pdfengInstituto Politécnico de Bragançapt_PTVulnerabilities in baseboard management controllers: risks and mitigation strategies in the IIoT environmentBarreto, JacksonLopes, Sérgio IvanPinto, PedroHandlehttp://hdl.handle.net/20.500.11960/3747ISBNIsPartOf978-972-745-324-52023-12-04T16:19:14Z2023-07-11T00:00:00Z2023-07-112023-12-02T17:27:55Zhttp://purl.org/coar/access_right/c_abf2open accesspt_PTBMC (Baseboard Management Controller)pt_PTFirmware vulnerabilitiespt_PTIIoT (Industrial Internet of Things)1468740 byteshttp://purl.org/coar/access_right/c_abf2application/pdffulltexthttp://repositorio.ipvc.pt/bitstream/20.500.11960/3747/2/Vulnerabilities_in_Baseboard_Management_Controllers_-_Risks_and_Mitigation_Strategies_in_the_IIoT_Environment.pdfother research producthttp://purl.org/coar/resource_type/c_c94fconference object |
| spellingShingle | Vulnerabilities in baseboard management controllers: risks and mitigation strategies in the IIoT environment Barreto, Jackson BMC (Baseboard Management Controller) Firmware vulnerabilities IIoT (Industrial Internet of Things) |
| status | SINGLETON |
| subject.fl_str_mv | BMC (Baseboard Management Controller) Firmware vulnerabilities IIoT (Industrial Internet of Things) |
| title | Vulnerabilities in baseboard management controllers: risks and mitigation strategies in the IIoT environment |
| title_full | Vulnerabilities in baseboard management controllers: risks and mitigation strategies in the IIoT environment |
| title_fullStr | Vulnerabilities in baseboard management controllers: risks and mitigation strategies in the IIoT environment |
| title_full_unstemmed | Vulnerabilities in baseboard management controllers: risks and mitigation strategies in the IIoT environment |
| title_short | Vulnerabilities in baseboard management controllers: risks and mitigation strategies in the IIoT environment |
| title_sort | Vulnerabilities in baseboard management controllers: risks and mitigation strategies in the IIoT environment |
| topic | BMC (Baseboard Management Controller) Firmware vulnerabilities IIoT (Industrial Internet of Things) |
| topic_facet | BMC (Baseboard Management Controller) Firmware vulnerabilities IIoT (Industrial Internet of Things) |
| url | http://hdl.handle.net/20.500.11960/3747 |
| visible | 1 |
Atividades financiadas
Não foram encontrados projetos financiados.