Unified Extensible Firmware Interface (UEFI)
Unified Extensible Firmware Interface (UEFI) is a specification for a software program that connects a computer's firmware to its operating system (OS). UEFI is expected to eventually replace BIOS.
Like BIOS, UEFI is installed at the time of manufacturing and is the first program that runs when a computer is turned on. It checks to see what hardware components the computing device has, wakes the components up and hands them over to the operating system. The new specification addresses several limitations of BIOS, including restrictions on hard disk partition size and the amount of time BIOS takes to perform its tasks.
Because UEFI is programmable, original equipment manufacturer (OEM) developers can add applications and drivers, allowing UEFI to function as a lightweight operating system.
The Unified Extensible Firmware Interface is managed by a group of chipset, hardware, system, firmware, and operating system vendors called the UEFI Forum.The specification is most often pronounced by naming the letters U-E-F-I.
Continue reading about UEFI:
Andrew Regenscheid, a mathematician with the computer security division of the National Institute of Standards and Technology (NIST), is concerned about the security issues UEFI presents.
Sebastian Anthony demystifies the long-overdue BIOS replacement.
Eric Parizo explains how NIST guidelines seek to minimize risk of BIOS attacks.
Microsoft's Steven Sinofsky describes how UEFI enables secure boot.
Join the conversation
4 comments
File Extensions and File Formats
SearchCompliance
risk assessment
Risk assessment is the identification of hazards that could negatively impact an organization's ability to conduct business.
PCI DSS (Payment Card Industry Data Security Standard)
The Payment Card Industry Data Security Standard (PCI DSS) is a widely accepted set of policies and procedures intended to ...
risk management
Risk management is the process of identifying, assessing and controlling threats to an organization's capital and earnings.
SearchSecurity
CISO as a service (vCISO, virtual CISO, fractional CISO)
A CISO as a service (CISOaaS) is the outsourcing of CISO (chief information security officer) and information security leadership...
access control
Access control is a security technique that regulates who or what can view or use resources in a computing environment.
advanced persistent threat (APT)
An advanced persistent threat (APT) is a prolonged and targeted cyberattack in which an intruder gains access to a network and ...
SearchHealthIT
HIPAA (Health Insurance Portability and Accountability Act)
HIPAA (Health Insurance Portability and Accountability Act) is United States legislation that provides data privacy and security ...
telemedicine (telehealth)
Telemedicine is the remote delivery of healthcare services, such as health assessments or consultations, over the ...
Project Nightingale
Project Nightingale is a controversial partnership between Google and Ascension, the second largest health system in the United ...
SearchDisasterRecovery
call tree
A call tree is a layered hierarchical communication model that is used to notify specific individuals of an event and coordinate ...
Disaster Recovery as a Service (DRaaS)
Disaster recovery as a service (DRaaS) is the replication and hosting of physical or virtual servers by a third party to provide ...
cloud disaster recovery (cloud DR)
Cloud disaster recovery (cloud DR) is a combination of strategies and services intended to back up data, applications and other ...
SearchStorage
FCoE (Fibre Channel over Ethernet)
FCoE (Fibre Channel over Ethernet) is a storage protocol that enable Fibre Channel (FC) communications to run directly over ...
Fibre Channel switch (FC switch)
A Fibre Channel switch is a networking device that is compatible with the Fibre Channel (FC) protocol and designed for use in a ...
SAN switch (storage area network switch)
A storage area network (SAN) switch is a device that connects servers and shared pools of storage devices and is dedicated to ...