Firmware Security in Three Steps