Firmware Upgrade Security on Samsung Knox Devices

The Problem

A device that accepts firmware updates over the air must be sure each image is genuine, current, and safe to install. A single weak check lets an attacker replace trusted firmware with a vulnerable or malicious one.

Constraints

• Updates travel over unreliable networks, so checks must fail safely and allow recovery.
• Downgrade and rollback must be blocked without stranding devices that need a legitimate older image.
• Enterprise customers need policy control over update timing, which must not weaken integrity.

Approach

• Worked on the FOTA / OTA delivery and install path, where image integrity is checked before a device applies an update.
• Verified image signing and integrity before installation, so an unsigned or tampered image is refused.
• Enforced rollback and downgrade protection, so an older vulnerable image cannot replace a newer one.
• Added post-update validation to confirm the device is in the expected state after an update completes.

Outcome

• Contributed to the firmware update path on Samsung devices, covering delivery, verification, and rollback protection.
• Built security review and test tooling used in the update work.

Technologies