The Unified Extensible Firmware Interface (UEFI) is a standardised interface between the firmware and the operating system used in all x86-based platforms over the past ten years. A side effect of the transition from conventional BIOS implementations to more complex and flexible implementations based on the UEFI was that it became easier for the malware to target BIOS in a widespread fashion, as these BIOS implementations are based on a common specification. This paper introduces Amaranth project - a solution to some of the contemporary security issues related to UEFI firmware. In this work we focused our attention on virtual machines as it allowed us to simplify the development of secure UEFI firmware. Security hardening of our firmware is achieved through several techniques, the most important of which are an operating system integrity checking mechanism (through snapshots) and overall firmware size reduction.

翻译：统一扩展硬体接口(UEFI)是过去十年来所有以x86为基础的平台所使用的硬体软件和操作系统之间的标准化界面。从传统的BIOS实施过渡到基于UEIFI的更复杂和灵活实施的一个副作用是,恶意软件更容易广泛针对BIOS,因为这些BIOS实施是基于一个共同的规格。本文介绍了Amaranth项目――解决与UEFI固态软件有关的一些当代安全问题的一个解决方案。在这项工作中,我们把注意力集中在虚拟机器上,因为它使我们能够简化开发安全的UEIF公司软件。我们固态软件的安保是通过几种技术实现的,其中最重要的是操作系统完整性检查机制(通过快照)和总体固态软件尺寸的缩小。