Paper on IPMI and BMC security(fish2.com)

http://fish2.com/ipmi/itrain.html