Dell Products Inc.

Azzam Tannous

Huijun Xie

Jean E Pierre

Massarrah N Tannous

Anoop Gulati

Antonio L Fontes

Christopher Campetti

Ananthanarayanan Balachandran

Carol Sheridan

Shruti Shetty

Jochen De Smet

A data service periodically monitors parameters of a computing system and periodically transmits metrics related to the monitored parameters to an AI service over a secure channel. The AI service uses a Time Series Classification model trained on training data that results from simulated row-hammer attacks to a computing system. The AI service processes the metrics using the trained Time Series Classification model. If the Time Series Classification model determines that the received metrics correspond to a row-hammer attack, the AI services transmits an attack confirmation message to the computing the data service. A remediation action is implemented responsive to receiving the attack confirmation message.

Cloud solution for rowhammer detection

Boot integrity of a storage platform is verified by comparing observed boot data values with expected boot data values stored in a secure remote cloud. The boot data values include hashes of software that runs at each stage of a boot sequence, e.g., BIOS, bootloader, kernel, and runlevel programs. The observed boot data values may be provided by a TPM using an AIK and nonce. If the observed boot data values fail to match the expected boot data values then a boot integrity service running on the storage platform limits functionality such as by disabling IO services, disabling remote data replication, enabling a diagnostic service, enabling a data collection service, disabling access by non-service accounts, and protecting a management database.

Cloud based boot integrity

A system for secure booting of an information handling system stores a Root of Trust private key in a hardware security module (HSM). A HSM-Integrated certificate creation utility receives inputs such as bin files for each firmware volume associated with a boot sequence. The HSM-Integrated certificate creation utility loads the correct extensions for the firmware volume, generates a certificate signing request (CSR) and generates a certificate based on the CSR. The certificates can be provided to a boot sequence for processing in a trusted firmware implementation without a certificate creation utility consuming the Hardware Root of Trust private key as a file that could be compromised.

System and method for booting using HSM integrated chain of trust certificates

Growing community of inventors

Framingham, MA, United States of America

Azzam Tannous