Threat Category: Supply Chain
Threat Description: An adversary with access to supplier shipping channels during transfer of system components can substitute a counterfeit firmware component for an authentic component.1
Supply Chain Attack Framework and Attack Patterns 1
Require firmware to be digitally signed by a trusted developer and the signature verified prior to the component being integrated into a larger system
Employ software integrity verification checks on installed firmware, which can be validated against a known-good value (e.g. brute-force resistant cryptographic hash of firmware image) to detect any modification to firmware
Obtain device measurements for comparison to normal ranges (e.g., temperature, timing, EM radiation, power consumption) to detect anomalous behavior.