CAPEC-680: Exploitation of Improperly Controlled Registers

Design proper access control policies for hardware register access from software and ensure these policies are implemented in accordance with the specified design.

Ensure security lock bit protections are reviewed for design inconsistencies and common weaknesses.

Test security lock programming flow in both pre-silicon and post-silicon environments.

Leverage automated tools to test that values are not reprogrammable and that write-once fields lock on writing zeros.

Ensure that measurement data is stored in registers that are read-only or otherwise have access controls that prevent modification by an untrusted agent.