Name: Bootloaders Under Fire: Real-World Threats and Practical Defenses - Ahmad Fatoum, Pengutronix
Start: 2025-08-26T11:00:00+0200
End: 2025-08-26T11:40:00+0200

25-27, August 2025
Amsterdam, Netherlands
View More Details & Registration
Note: The schedule is subject to change.

The Sched app allows you to build your schedule but is not a substitute for your event registration. You must be registered for Open Source Summit Europe 2025 to participate in the sessions. If you have not registered but would like to join us, please go to the event registration page to purchase a registration.

This schedule is automatically displayed in Central European Summer Time, CEST (UTC +2). To see the schedule in your preferred timezone, please select from the drop-down menu to the right.

IMPORTANT NOTE: Timing of sessions and room locations are subject to change.

Tuesday August 26, 2025 11:00 - 11:40 CEST

Elicium 2

Bootloaders play a critical role in securing embedded systems, especially when implementing verified boot.

But while much attention goes into the cryptographic boot chain and run-time security, other parts of the bootloader are often overlooked — leaving a key component of the system exposed.

This talk outlines practical steps to harden a bootloader against different real-world threats.

Topics include identifying security-critical functionality, avoiding common pitfalls, slimming down the TCB and what kinds of hard- or software misconfiguration can silently undermine your defenses.

Along the way, we’ll use barebox as a practical example to show complementary approaches — like applying fuzzing to core logic, adding runtime hardening, and securely handling unlock scenarios — as well as how these could have mitigated a number of recently reported vulnerabilities.

Attendees will learn how to reduce risk during early system startup and improve the overall security posture of their embedded systems.

Speakers

Ahmad Fatoum

Embedded Linux Developer, Pengutronix

Ahmad joined the kernel team at Pengutronix in 2018 to work full-time on furthering Linux world domination. He does so by helping automotive and industrial customers build embedded Linux systems based on the mainline Linux kernel. Having a knack for digging in low-level guts, his... Read More →

Tuesday August 26, 2025 11:00 - 11:40 CEST
Elicium 2

Embedded Linux Conference

Audience Experience Level Intermediate

Open Source Summit Europe 2025

Ahmad Fatoum

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!