Security below the OS – A security analysis of UEFI

This academic paper analyzes security vulnerabilities in UEFI (Unified Extensible Firmware Interface, the low-level software that runs before your operating system starts). The research examines how attackers could exploit weaknesses at this firmware level, which is below the OS and therefore harder to detect and protect. Since UEFI runs before any security software can load, compromises at this layer pose serious risks to system security.