Pre-boot context-based security mitigation
AssigneeDell Products L.P.
InventorsGokul Thiruchengode Vajravel, Ibrahim Sayyed, Daniel L. Hamlin
Life of this patent
Estimating the term…
Abstract
An information handling system may determine a pre-boot security posture, and update an advanced configuration and power interface mitigation table with the pre-boot security posture. The system may also update a security mitigation table based on a security mitigation policy, and determine a security mitigation based on a protection flag in the advanced configuration and power interface mitigation table and the security mitigation table.
Claims20
A method comprising:
- determining, by a processor, a pre-boot security posture of an information handling system;
- updating an advanced configuration and power interface mitigation table based on the pre-boot security posture;
- receiving a security mitigation policy;
- updating a security mitigation table based on the security mitigation policy;
- determining a security mitigation based on a protection flag in the advanced configuration and power interface mitigation table and the security mitigation table;
- and
- applying the security mitigation.
An information handling system, comprising:
- a processor;
- and
- a memory coupled to the processor, the memory having program instructions stored thereon that, upon execution by the processor, cause the information handling system to:
- determine a pre-boot security posture of the information handling system;
- update an advanced configuration and power interface mitigation table with the pre-boot security posture;
- update a security mitigation table based on a security mitigation policy;
- determine a security mitigation based on a protection flag in the advanced configuration and power interface mitigation table and the security mitigation table;
- and
- apply the security mitigation.
A non-transitory computer-readable medium to store instructions that are executable to perform operations comprising:
- determining a pre-boot security posture of an information handling system;
- updating an advanced configuration and power interface mitigation table with the pre-boot security posture;
- updating a security mitigation table based on a security mitigation policy;
- and
- determining a security mitigation based on an indicator of attack associated with a protection flag in the advanced configuration and power interface mitigation table and the security mitigation table.
Dependencies are inferred from the claim text.