System, method, and computer program product for mounting an image of a computer system in a pre-boot environment for validating the computer system
View Patent ↗A system, method, and computer program product are provided for mounting an image of a computer system in a pre-boot environment for validating the computer system. An image of an operating system is mounted in a pre-boot environment of the programmable device. An untrusted component of the operating system is identified that is registered to be automatically loaded or loaded during a boot-up stage of the operating system that is predetermined to be early. The untrusted component is rescheduled to be initiated after loading of at least a portion of a security system on the programmable device.
1. A non-transitory computer readable medium comprising instructions stored thereon that when executed cause a programmable device to:
mount an image of an operating system in a pre-boot environment of the programmable device;
identify an untrusted component of the operating system registered to be automatically loaded or loaded during a boot-up stage of the operating system that is predetermined to be early; and
reschedule the untrusted component to be initiated after loading of at least a portion of a security system on the programmable device.
2. The non-transitory computer readable medium of claim 1 , wherein the instructions stored thereon that when executed cause the programmable device to reschedule the untrusted component to be initiated after loading of at least a portion of a security system on the programmable device comprise instructions that when executed cause the programmable device to:
reschedule the untrusted component to be initiated after loading predetermined components of the security system.
3. The non-transitory computer readable medium of claim 1 , wherein the instructions stored thereon that when executed cause the programmable device to identify an untrusted component of the operating system comprise instructions that when executed cause the programmable device to:
verify a digital signature associated with components of the operating system registered to be automatically loaded or loaded during a boot-up stage of the operating system that is predetermined to be early.
4. The non-transitory computer readable medium of claim 1 , wherein the instructions stored thereon further comprise instructions that when executed cause the programmable device to:
monitor a security system of the programmable device during execution of the operating system, to ensure that the security system executes as expected.
5. The non-transitory computer readable medium of claim 1 , wherein the pre-boot environment is a virtualized pre-boot environment.
6. The non-transitory computer readable medium of claim 1 , wherein the pre-boot environment is provided by a chipset extension.
7. A programmable apparatus, comprising:
one or more processors; and
a memory, coupled to the one or more processors, on which are stored instructions, comprising instructions that when executed cause at least some of the one or more processors to:
mount an image of an operating system in a pre-boot environment of the programmable apparatus;
identify an untrusted component of the operating system registered to be automatically loaded or loaded during a boot-up stage of the operating system that is predetermined to be early; and
reschedule the untrusted component to be initiated after loading of at least a portion of a security system on the programmable apparatus.
8. The programmable apparatus of claim 7 , wherein the programmable apparatus is a mobile device.
9. The programmable apparatus of claim 7 , wherein the programmable apparatus is an embedded programmable device.
10. The programmable apparatus of claim 7 , wherein the instructions that when executed cause at least some of the one or more processors to reschedule the untrusted component to be initiated after loading of at least a portion of a security system on the programmable apparatus comprise instructions that when executed cause at least some of the one or more processors to:
reschedule the untrusted component to be initiated after loading predetermined components of the security system.
11. The programmable apparatus of claim 10 , wherein the one or more processors and memory are virtualized.
12. The programmable apparatus of claim 7 , wherein the instructions that when executed cause at least some of the one or more processors to identify an untrusted component of the operating system comprise instructions that when executed cause at least some of the one or more processors to:
verify a digital signature associated with components of the operating system registered to be automatically loaded or loaded during a boot-up stage of the operating system that is predetermined to be early.
13. A method of controlling loading of an operating system, comprising:
mounting an image of an operating system in a pre-boot environment of a programmable device;
identifying an untrusted component of the operating system registered to be automatically loaded or loaded during a boot-up stage of the operating system that is predetermined to be early; and
rescheduling the untrusted component to be initiated after loading of at least a portion of a security system on the programmable device.
14. The method of claim 13 , wherein rescheduling the untrusted component to be initiated after loading of at least a portion of a security system on the programmable device further comprises:
rescheduling the untrusted component to be initiated after loading predetermined components of the security system.
15. The method of claim 13 , wherein identifying an untrusted component of the operating system further comprises:
verifying a digital signature associated with components of the operating system registered to be automatically loaded or loaded during a boot-up stage of the operating system that is predetermined to be early.
16. The method of claim 13 , further comprising:
monitoring a security system of the programmable device during execution of the operating system, to ensure that the security system executes as expected.
17. The method of claim 13 , wherein the pre-boot environment is a virtualized pre-boot environment.
18. The method of claim 13 , wherein the pre-boot environment is provided by a chipset extension.
19. A non-transitory computer readable medium comprising instructions stored thereon that when executed cause a programmable device to:
mount an image of an operating system in a pre-boot environment of the programmable device;
identify an untrusted component of the operating system registered to be automatically loaded or loaded during a boot-up stage of the operating system that is predetermined to be early; and
reschedule the untrusted component to be initiated on-demand by a security system on the programmable device.
20. The non-transitory computer readable medium of claim 19 , wherein the instructions stored thereon that when executed cause the programmable device to identify an untrusted component of the operating system comprise instructions that when executed cause the programmable device to:
verify a digital signature associated with components of the operating system registered to be automatically loaded or loaded during a boot-up stage of the operating system that is predetermined to be early.
21. The non-transitory computer readable medium of claim 19 , wherein the instructions stored thereon further comprise instructions that when executed cause the programmable device to:
monitor a security system of the programmable device during execution of the operating system, to ensure that the security system executes as expected.
22. The non-transitory computer readable medium of claim 19 , wherein the pre-boot environment is a virtualized pre-boot environment.
23. The non-transitory computer readable medium of claim 19 , wherein the pre-boot environment is provided by a chipset extension.