User controllable platform-level trigger to set policy for protecting platform from malware
Embodiments of systems, apparatuses, and methods to protect data stored in a storage system of a device from malware alternation are described. In some embodiments, a system receives an indication that the data is to be protected. In addition, the system further triggers an interrupt of the device and secures the data from the malware alternation.
1. A method to protect data stored in a storage system of a device from malware alteration, comprising:
receiving an indication that the data is to be protected, wherein the receiving an indication in response to a hardware switch being activated;
triggering an interrupt of the device to lock the data outside of operating system control;
securing the data from the malware alteration by preventing an operating system process from altering the data, by
sending by a trusted application a first message to the storage system, the first message specifying that the data is to be protected from the malware alteration, and
receiving by a trusted application a second message from the storage system indicating that the data is protected from malware alteration, wherein the first and second message are transported over a tunnel between the device and the storage system.
2. The method of claim 1 , wherein, in response to the sending of the first message, the data is made read-only.
3. The method of claim 1 , further comprising:
receiving a configuration that indicates that the data is to be protected.
4. The method of claim 1 , further comprising:
receiving the data; and
storing the data in the storage system.
5. The method of claim 1 , wherein the hardware switch is dedicated switch.
6. The method of claim 1 , wherein the hardware switch is keyboard combination.
7. The method of claim 1 , wherein the data is anti-virus definition data.
8. A device to protect data stored in a storage system of a device from malware alternation, comprising:
a hardware switch, when activated, to indicate that the data is to be protected and to trigger an interrupt of the device to lock the data outside of operating system control;
lockable storage to secure the data from the malware alternation by preventing an operating system process from altering the data; and
a trusted application interface to send a first message to the storage system, the first message to specify that the data is to be protected from the malware alternation and to receive a second message from the storage system that indicates that the data is protected from the malware alteration, wherein the first and second message are transported over a tunnel between the device and the storage system.
9. The device of claim 8 , wherein the data is made read-only to secure the data.
10. The device of claim 8 , wherein the hardware switch is keyboard combination.
11. A non-transitory machine-readable medium having executable instructions to cause one or more processing units to perform a method to protect data stored in a storage system of a device from malware alternation, the method comprising:
receiving an indication that the data is to be protected, wherein the receiving an indication in response to a hardware switch being activated;
triggering an interrupt of the device to lock the data outside of operating system control;
securing the data from the malware alteration by preventing an operating system process from altering the data, by
sending by a trusted application a first message to the storage system,
the first message specifying that the data is to be protected from the malware alteration, and
receiving by a trusted application a second message from the storage system indicating that the data is protected from malware alteration, wherein the first and second message are transported over a tunnel between the device and the storage system.
12. The non-transitory machine-readable medium of claim 11 , wherein, in response to the sending of the first message, the data is made read-only.
13. The non-transitory machine-readable medium of claim 11 , further comprising: receiving a configuration that indicates that the data is to be protected.
14. The non-transitory machine-readable medium of claim 11 , further comprising:
receiving the data; and
storing the data in the storage system.
15. The non-transitory machine-readable medium of claim 11 , wherein the data is anti-virus definition data.