OpenBMC Security Training in Kraków, Poland

This training equips participants with the knowledge and skills to secure OpenBMC firmware implementations. It covers foundational security concepts, threat modeling, secure boot chains, firmware update security, runtime protection, and vulnerability management. Through a combination of theoretical instruction and practical exercises, participants will learn to identify and mitigate security risks in OpenBMC deployments.

• Overview of OpenBMC architecture and attack surface
• Security objectives: confidentiality, integrity, availability
• Regulatory and compliance considerations

• Identifying assets, threats, and vulnerabilities
• STRIDE and DREAD methodologies
• Creating and maintaining threat models

• U-Boot and secure boot chain implementation
• TPM integration for measured boot
• Remote attestation protocols

• Signed updates and verification
• Rollback protection and recovery mechanisms
• Update server security and transport

• Kernel hardening and SELinux policies
• Network service security and firewall configuration
• User authentication and access control

• Vulnerability scanning and patch management
• Security event logging and monitoring
• Incident response planning and execution

• Penetration testing methodologies
• Code review and static analysis
• Compliance auditing and reporting