BAC-L3-SEC-107Blockchain security
Software supply chain security
A node compiles hundreds of dependencies. One compromised dependency is enough, and the code you run is no longer the code you read.
- Level
- L3 — Infrastructure engineer
- Duration
- 3 h
- Track
- Blockchain security
- Maintainer
- Blockchain Security Engineer
Learning objectives
- 01Verify the integrity of a binary and its dependencies
- 02Produce a software bill of materials
- 03Set up a reproducible build
Guided lab
Produce a node's bill of materials and verify every critical dependency.
Independent lab
Demonstrate that a build produces the same binary on two different machines.
Security angle
Downloading a node binary without checking its signature means running unknown code alongside your keys.
Assessment
Bill of materials plus a reproducibility demonstration.