Original title: Zabezpečené spouštění operačního systému
Translated title: Secure boot of the operating system
Authors: Olenočin, Štefan ; Kuchař, Karel (referee) ; Sysel, Petr (advisor)
Document type: Master’s theses
Year: 2025
Language: cze
Publisher: Vysoké učení technické v Brně. Fakulta elektrotechniky a komunikačních technologií
Abstract: [cze] [eng]
Diplomová práca sa venuje zabezpečeniu zavádzania operačného systému GNU/Linux na platforme Verdin iMX8MP. Najprv sa venuje generickému procesu zavádzania operačného systému. Popisuje zavádzač OS a viac do hĺbky sa venuje špecificky zavádzaču U-Boot a porovnávaho s GRUB v rámci využitia na embedded zariadeniach. Práca ďalej približuje možné útoky na zavádzací proces, ich dopady a možné mitigácie útokov. V praktickej časti sa práca zaoberala zabezpečením zavádzača U-Boot. Bol využitý príklad na Raspberry PI 4B. Získané poznatky sa ďalej aplikovali na konkrétnej hardvérovej platforme Verdin iMX8MP. Vygeneroval sa strom kľúčov, bol podpísaný zavádzač a vytvorila sa reťaz dôvery s pomocou technológie HABv4. Na koniec bol prevedený simulovaný útok na zabezpečenú hardvérovú platformu. The diploma thesis deals with the implementation of secure boot using the GNU/Linux operating system on the Verdin iMX8MP platform. First, it deals with the generic process of booting the operating system. It describes the OS bootloader and goes into more depth specifically about the U-Boot bootloader and compares it to GRUB in terms of use on embedded devices. The thesis further describes possible attacks on the boot process, their impacts and possible mitigations of attacks. In the practical part, the thesis deals with the security of the U-Boot bootloader. As an example for securing the U-Boot, the Raspberry PI 4B was used. The acquired knowledge was further applied on the specific Verdin iMX8MP hardware platform. A public key infrastructure tree was generated, a bootloader was signed, and a chain of trust was created with the help of HABv4 technology. Finally, a simulated attack on secured hardware platform was executed.
Keywords: boot; bootloader; HAB; IMX; Linux; NXP; operating system; secure boot; Toradex; U-Boot; UEFI; HAB; IMX; Linux; NXP; operačný systém; Toradex; U-Boot; UEFI; zabezpečené zavádzanie; zavádzanie; zavádzač

Institution: Brno University of Technology (web)
Document availability information: Fulltext is available in the Brno University of Technology Digital Library.
Original record: http://hdl.handle.net/11012/251497

Permalink: http://www.nusl.cz/ntk/nusl-683406


The record appears in these collections:
Universities and colleges > Public universities > Brno University of Technology
Academic theses (ETDs) > Master’s theses