References | SoftIron

USA Office

6540 Central Avenue
Newark, CA 94560
USA

UK Office

Level 1, Devonshire House
One Mayfair Place
London W1J 8AJ
United Kingdom

Connect

SoftIron, HyperDrive, HyperCast and the SoftIron logo are registered trademarks of SoftIron Limited. ARM is a registered trademark of ARM Limited (or its subsidiaries) in the EU and/or elsewhere. AMD, the AMD arrow logo, and combinations thereof are trademarks of Advanced Micro Devices Inc. Socionext is a registered trademark of Socionext, Inc. SoftIron disclaims proprietary interest in the marks and names of others. This document is for information only. No warranties are given or implied. Contents are subject to change without notice. SoftIron Ltd is registered in England (no. 8172199) at Level 1, Devonshire House, One Mayfair Place, London W1J 8AJ, United Kingdom.

Provenance information and resources

The White House Decree: Executive Order on Securing the Information and Communications Technology and Services Supply Chain

The Big Hack: How China Used a Tiny Chip to Infiltrate U.S. Companies

Everybody Does It: The Messy Truth About Infiltrating Computer Supply Chains

Aussie DOD: Hardware Trojans – Prevention, Detection, Countermeasures (A Literature Review)

Vetting Commodity IT Software and Firmware (VET)

Rakshasa: The hardware backdoor that China could embed in every computer

Hardware backdooring is practical

Spy agencies ban on Lenovo PCs due to backdoor vulnerabilities

Hardware attacks, backdoors and electronic component qualification

Hardware Trojan: Threats and Emerging Solutions

Protecting Against National Security Threats to the Communications Supply Chain Through FCC Programs, FCC 19-121

DoD 2011 Strategy for Operating in Cyberspace

National Intelligence Estimate 2009 Global Cyber Threat – Supply Chain Excerpts

An undetectable Hardware Trojan is reality [on dopant attacks]

On DARPA’s Integrity and Reliability of Integrated Circuits (IRIS) program

Senate Armed Services Committee Hearing on Counterfeit Electronic Parts in the DOD Supply Chain [2011; contains several case studies]

Intellipedia – Air Gapped Network Threats

MITRE ATT&CK: Supply chain compromise [includes historical examples, all software]

nternal NSA presentation strongly hinting at “tailored access” to supply chains

NSA’s SENTRY EAGLE program

NSA/CSS target exploitation (TAREX) classification guide

Intellipedia “Supply Chain Cyber Threats” [discusses threat vectors and threat assessments by various agencies]

“Stealthy Techniques Can Crack Some of SIGINT’S Hardest Targets” [supply-chain interdiction success stories]

Capability of the People’s Republic of China to Conduct Cyber Warfare and Computer Network Exploitation

Intellipedia, “BIOS Threats”

National Intelligence Estimate: The Global Cyber Threat to the US Information Infrastructure

NSA Special Collection Service

On DoD warning about Lenovo

Building reliable SMM backdoor for UEFI based platforms

Eric Schmidt: Huawei has engaged in unacceptable practices

USA Office

UK Office

Connect