Exploitation from malicious PCI Express peripherals

Exploitation from malicious PCI Express peripherals
Colin L. Rothwell
February 2019, 108 pages

The thesis of this dissertation is that, despite widespread belief in the security community, systems are still vulnerable to attacks from malicious peripherals delivered over the PCI Express (PCIe) protocol. Malicious peripherals can be plugged directly into internal PCIe slots, or connected via an external Thunderbolt connection.[…]

https://www.cl.cam.ac.uk/techreports/UCAM-CL-TR-934.html