Best Embedded Linux Security Sandboxes for Embedded Systems Training
TOPICS
Training materials
Training materials are renowned for being the most comprehensive and user friendly available. Their style, content and coverage is unique in the embedded systems training world, and has made them sought after resources in their own right. The materials include:
Fully indexed class notes creating a complete reference manual
Workbook full of practical examples and solutions to help you apply your knowledge
Structure and Content
Security fundamentals
What is security and why is it necessary? • Security concepts and terminology • Defense-in-depth approach • Why are devices attacked and who attacks them? • The guiding principles of securing a system
Threat modelling
Introduction to the Secure Software Development Lifecycle process • Why built-in-by-design security is important • Identifying what to protect • Security design and architecture • Threat modelling and mitigation design • Practicals: Creating a threat model, defining security requirements
Application security
Access models • The Unix security model • Process privileges and capabilities • Process resources and execution limits • Sandboxes • Securing inter-process communication • Practical: Implementing an LXC sandbox
Linux Security Modules
The origin and role of LSMs • Mandatory Access Control • LSMs used in embedded systems • Performance impacts of LSMs • Practical: creating a sandbox using LSM • Practical: adding LSM hardening to an LXC sandbox
Securing the software environment
Dynamic loading • Limiting resources • Limiting kernel access • Practical: Dynamic linking
Network security
Data in motion • The internet protocol suite • Link layer protection • Internet and transport layer protection • Application layer protection • Network domains, firewalls and port forwarding • Wireless security • Other digital connectivity threats • Practicals: Port scanning, implementing a firewall
The course can also be tailored to suit your particular hardware and software environment. Please contact LearnChase to discuss your specific requirements.