Take a look at https://www.ieee-security.org/TC/SP2019/papers/310.pdf, which is a paper about the security of t

Take a look at https://www.ieee-security.org/TC/SP2019/papers/310.pdf, which is a paper about the security of the firmware of self-encrypting drives. Vulnerabilities in this firmware could result in the encryption keys being available even if the user didn’t know the correct password for the drive. In this case the firmware probably wasn’t actively malicious, but let’s consider the case of a drive that is. Think about each of the following cases, and describe how a malicious drive could use them to cause damage or violate your security assumptions. Then, describe how an operating system could prevent any harm occurring.

1. The drive identifies the OS kernel, and returns a modified kernel when code attempts to read the original
2. The drive identifies the swap file, and modifies returns modified data when the OS attempts to read from it