Intel® System Resources Defense and Intel® System Security Report

Intel^® System Resources Defense is the collection of techniques and code within the BIOS used to create and enforce HW access policy for the SMI handler. It consists of a collection of policy mechanisms that are configured by POST before the SMI handler is locked down. Once the SMI handler is locked, all accesses into the system must be compliant with the policy established during POST.

Intel^® Runtime BIOS Resilience is a subset of Intel^® System Resources Defense covering SMM memory policy only. Intel^® Runtime BIOS Resilience Protection hardens the SMI handler via hardware enforced BIOS policy regarding SMI handler access to memory using an enhanced paging policy. This paging policy covers SMI handler access to both BIOS and MLE resources. Intel^® Runtime BIOS Resilience Protection is extended using a technology codenamed Intel^® System Security Report.

The Platform Properties Assessment Module (PPAM) is the primary component of Intel^® System Security Report. It collects and reports information about platform SMM implementation and configuration, in order to provide trustworthy attestation of the resulting SMI memory policy regarding SMM secure configuration and access to MLE owned memory. Intel^® System Security Report is used to create a trustworthy report describing the SMM policy. PPAM is a major/core component of Intel^® System Security Report 1.0/1.1 technology