pDNSSOC workshop

Europe/Zurich
28/S-029 (CERN)

28/S-029

CERN

35
Show room on map
Romain Wartel (CERN)
Description

This workshop focuses on the different means DNS logging information can be used to help protect the Research & Education (R&E) sector as a whole.

It covers architecture aspects (DNS, pDNS, logs vs aggregation, etc.), tooling (dnstap, pDNSSOC, MISP, etc.) and deployment strategies. It also explores cooperation avenues with initiatives like SIE Europe.

The overall intent of the workshop is to improve daily security operations and cooperation between R&E organisations, ranging from mature security teams to smaller, understaffed organisations.

pDNSSOC: "Correlating DNS logs with threat intel from MISP as a poor man’s SOC."

https://github.com/CERN-CERT/pDNSSOC

Videoconference
Zoom Meeting ID
66637676244
Host
Romain Wartel
Useful links
Join via phone
Zoom URL
Registration
pDNSSOC workshop Participants
  • Thursday, June 1
    • 9:00 AM 9:30 AM
      Introductions & round table 30m 28/S-029

      28/S-029

      CERN

      35
      Show room on map
    • 9:30 AM 10:30 AM
      Discussion: Problem definition & communities involved 1h 28/S-029

      28/S-029

      CERN

      35
      Show room on map

      e-infrastructure problem space, pDNS data collections in Europe, key stakeholders.
      In short, what are we trying to achieve with DNS/pDNS?

    • 10:30 AM 11:00 AM
      Coffee break 30m 28/S-029

      28/S-029

      CERN

      35
      Show room on map
    • 11:00 AM 12:00 PM
      QUIC Transport Protocol 1h 31/3-004 - IT Amphitheatre

      31/3-004 - IT Amphitheatre

      CERN

      105
      Show room on map

      https://indico.cern.ch/event/1289144/

      Speaker: Paul Vixie
    • 12:00 PM 1:30 PM
      Lunch 1h 30m 28/S-029

      28/S-029

      CERN

      35
      Show room on map
    • 1:30 PM 2:00 PM
      Trials and tribulations of getting pDNS from Higher Ed 1d 30m 28/S-029

      28/S-029

      CERN

      35
      Show room on map
      Speaker: Chris O'Donnell
    • 2:00 PM 4:00 PM
      pDNSSOC 2h 28/S-029

      28/S-029

      CERN

      35
      Show room on map
      • pDNSSOC overview, design, functionalities, limitation, deployment model, and future.
      • Integration options with SIE Europe

      https://github.com/CERN-CERT/pDNSSOC

      Speakers: Pau Cutrina Vilalta (CERN), Romain Wartel (CERN)
    • 4:00 PM 7:00 PM
      CERN Tour 3h 28/S-029

      28/S-029

      CERN

      35
      Show room on map

      A VIP guided tour of CERN facilities
      16h CERN Antimatter factory (https://home.cern/science/accelerators/antiproton-decelerator)
      17h CERN Data Center (https://home.cern/science/computing/data-centre)
      18h CERN Control Centre (CCC), where LHC operations are conducted (https://op-webtools.web.cern.ch/Vistar/vistars.php)

      Speaker: Stefan Lueders (CERN)
    • 7:00 PM 7:20 PM
      Dinner 20m 28/S-029

      28/S-029

      CERN

      35
      Show room on map

      Location and logistics will be confirmed.
      Cheese likely.

    • 9:30 AM 10:30 AM
      Technical session: pDNSSOC, dnstap, pDNS 1h 28/S-029

      28/S-029

      CERN

      35
      Show room on map

      Continued technical discussions, demo and hands-on technical work

      Speakers: Dr David Crooks (UKRI STFC), Pau Cutrina Vilalta (CERN), Romain Wartel (CERN)
    • 10:30 AM 11:00 AM
      Coffee break 30m 28/S-029

      28/S-029

      CERN

      35
      Show room on map

      And possibly French pastries

    • 11:00 AM 12:00 PM
      Technical session: pDNSSOC, dnstap, pDNS 1h 28/S-029

      28/S-029

      CERN

      35
      Show room on map

      Continued technical discussions, demo and hands-on technical work

      Speakers: Dr David Crooks (UKRI STFC), Pau Cutrina Vilalta (CERN), Romain Wartel (CERN)
    • 12:00 PM 1:30 PM
      Lunch 1h 30m 28/S-029

      28/S-029

      CERN

      35
      Show room on map
    • 1:30 PM 3:00 PM
      Technical session: pDNSSOC, dnstap, pDNS 1h 30m 28/S-029

      28/S-029

      CERN

      35
      Show room on map

      Continued technical discussions, demo and hands-on technical work

      Speakers: Dr David Crooks (UKRI STFC), Pau Cutrina Vilalta (CERN), Romain Wartel (CERN)
    • 3:00 PM 3:30 PM
      Wrap up and next steps 30m 28/S-029

      28/S-029

      CERN

      35
      Show room on map