Paper Title: Implementation of NVMe Persistent Storage for Device Resiliency and Attestation

Paper Abstract: This presentation will discuss the threats facing devices below the OS and at the firmware level and review statistics and results from studies done in this space. We will then discuss the practical implementation of NVMe persistent storage to provide a mechanism to protect, detect and recover firmware (in accordance to the NIST Sp1800-193 and NIST Sp800-34 documentation) on the device, especially for subcomponents that do not have their own recovery storage (partially sufficient, supplicant or fully dependent components) and an architecture implementing a combination of NVMe Persistent storage and flash memory to store main system firmware.

Paper Author: Thorsten Stremlau, CTO and Principal Engineer, CISSP, Trusted Computing Group

Author Bio: Thorsten Stremlau is a Principal Engineer and Chief Technologist within Lenovo’s Intelligent Devices Group PC & Smart Devices business. He is responsible for technical strategies for devices, software and cloud services globally. In this role, Thorsten identifies and drives integration of current and future technologies, integrating them into the product development processes, and specifically drives innovation into the security capabilities of Lenovo’s commercial portfolio. Thorsten’s career has been dedicated to identifying solutions and strategic implementations for Lenovo’s customers in all aspects of IT. As an engineer in both IBM and Lenovo for nearly 25 years, his broad experience enabled him to assist thousands of our customers to digitally transform their environments using Lenovo technology. Thorsten holds a Bachelor in Industrial Manufacturing/Finance and Electrical Engineering. Thorsten lives in North Carolina with his family.