Thematic CERN School of Computing on Security 2023

Name: Thematic CERN School of Computing on Security 2023
Start: 2023-10-08T11:00:00+02:00
End: 2023-10-14T11:00:00+02:00
Location: MedILS, Split, Croatia

8 Oct 2023, 11:00 → 14 Oct 2023, 11:00 Europe/Zagreb

MedILS, Split, Croatia

Meštrovićevo šetalište 45 HR – 21000 Split Croatia

Alberto Pace (CERN), Kristina Gunne (CERN), Andrzej Nowicki (CERN)

Description

The 13th Thematic CERN School of Computing (tCSC security 2023) will take place on October 8- 14, 2023. The theme of the school is "Security of research computing infrastructures" - see the academic programme for more details.

The school is proposed to people working in academia and research institutes, who as part of their job need to ensure security and resilience of computing resources they manage, and want to be prepared to detect and handle possible security incidents.

This school is organized by CERN in collaboration with the Faculty of Science, University of Split. The school will take place in Split, Croatia, and be hosted at the Mediterranean Institute For Life Sciences (MEDILS) Conference Centre. The Centre is a historical renovated building situated in a wooded and landscaped park located on the Adriatic Sea coast, a few kilometers from the centre of Split.

Applications are closed.

Important Dates

Monday 31 July - applications closing at midnight
Wednesday 16 August - invitations sent to the selected participants
Wednesday 6 September - registration fee payment deadline
Sunday 8 October - Saturday 14 October - the school

CERN School of Computing

Computing.School@cern.ch

Sunday 8 October
- Sun 8 Oct
- Mon 9 Oct
- Tue 10 Oct
- Wed 11 Oct
- Thu 12 Oct
- Fri 13 Oct
- Sat 14 Oct
- 12:45 → 13:30
  
  Lunch 45m
- 14:00 → 16:00
  
  Registration 2h
- 16:00 → 16:40
  
  Self-presentation: 1 minute per person 40m
  
  sCSC2023_self_presentations.pdf
- 16:40 → 17:00
  
  Welcome to the CERN School of Computing 20m
  
  Speakers: Alberto Pace (CERN), Toni Sculac (University of Split)
  
  2023-10-08-Director-Slides-Split-v8-Pre-Briefing.pdf
  
  2023-10-08-Director-Slides-Split-v8-Pre-Briefing.pptx
- 17:00 → 17:15
  
  Transport to Split 15m
- 17:30 → 19:15
  
  Visit of Split old town 1h 45m
- 19:15 → 20:45
  
  Outside Welcome Dinner at Restaurant Para Di Soto 1h 30m
  
  https://paradisoto.hr/en/main/
Monday 9 October
- Sun 8 Oct
- Mon 9 Oct
- Tue 10 Oct
- Wed 11 Oct
- Thu 12 Oct
- Fri 13 Oct
- Sat 14 Oct
- 09:00 → 09:45
  
  Opening Session 45m
  
  Speakers: Alberto Pace (CERN), Ivica Puljak (Mayor of Split), Mile Dzelalija (University of Split)
  
  2023-10-09-Director-Slides-Split-Opening.pdf
  
  2023-10-09-Director-Slides-Split-Opening.pptx
  
  sCSC_about_Split_Ivica_Puljak_2023.pdf
  
  sCSC_about_Split_Ivica_Puljak_2023.ppt
- 09:45 → 10:45
  Security in research and scientific computing 1h
  - computer security: past, present and future
  - current risk landscape
  - most common threats and attack vectors
  - "why are we here?"
  Speaker: Stefan Lueders (CERN)
  
  Computer Security --- Past, Present, Future @ SUMM (2023).pdf
- 10:45 → 11:00
  
  Announcements 15m
  
  2023-10-09-Director-Slides-Split-Announcement-Monday.pdf
  
  2023-10-09-Director-Slides-Split-Announcement-Monday.pptx
- 11:00 → 11:30
  
  Coffee break 30m
- 11:30 → 12:30
  
  Identity, authentication, authorisation 1h
  
  • An introduction to the concepts of Identity, Authentication, and Authorization
  • Authentication and authorisation for distributed research
  • Methods for communicating authentication and authorization: Certificates, SAML, OAuth
  • How these technologies fit within research infrastructures
  
  Speaker: Mr Tom Dack (Science and Technology Facilities Council STFC (GB))
  
  IAA-SCSC2023-Glossary.pdf
  
  scsc23-identityAuthNAuthZ.pdf
- 12:30 → 13:15
  
  Lunch 45m
- 13:15 → 14:45
  
  Study time and/or daily sports 1h 30m
- 14:45 → 15:45
  
  Security architecture fundamentals 1h
  
  Security architecture fundamentals
  • fundamental security principles
  • develop skills to be a security architect
  • how to design and provide secure computing infrastructure
  • security standards and frameworks
  • physical security
  • network security: segmentation, firewalls, VPNs
  
  Speaker: Barbara Krašovec (IJS)
  
  20231009_Security_architecture.pdf
- 16:00 → 16:15
  
  Coffee break 15m
- 16:15 → 17:15
  Security operations - lecture 1 1h
  - security operations: history, CERT vs. CSIRT
  - CSIRT organisation and provided services
  - preparations: asset management, security monitoring etc.
  - incident response readiness
  - lessons learned from past incidents
  Speaker: Sven Gabriel
  
  tcsc_2023_sec_ops.pdf
- 17:15 → 18:15
  Security operations - lecture 2 1h
  - security operations: history, CERT vs. CSIRT
  - CSIRT organisation and provided services
  - preparations: asset management, security monitoring etc.
  - incident response readiness
  - lessons learned from past incidents
  Speaker: Sven Gabriel
- 18:15 → 19:15
  
  Network design - exercise 1h
  
  Speaker: Barbara Krašovec (ISJ)
  
  20231009_Network_design_exercise.pdf
- 19:15 → 20:00
  
  Dinner at MEDILS 45m
Tuesday 10 October
- Sun 8 Oct
- Mon 9 Oct
- Tue 10 Oct
- Wed 11 Oct
- Thu 12 Oct
- Fri 13 Oct
- Sat 14 Oct
- 08:45 → 09:45
  
  Virtualisation and cloud security 1h
  
  Virtualisation and cloud security
  • virtualisation security fundamentals
  • cloud service models
  • authentication and key management
  • data security in the cloud
  • DevSecOps
  • security in private and public cloud
  • common threats in the cloud
  • security tools
  
  Speaker: Barbara Krašovec (IJS)
  
  20231010-Cloud-security.pdf
- 09:45 → 10:45
  Risk and vulnerability management 1h
  - risk analysis and risk mitigation
  - vulnerability lifecycle, monitoring, scanning
  - CVE, CVSS, CPE, CWE and related standards
  - special cases: vulnerable hardware, EOL systems etc.
  Speaker: Sven Gabriel
  
  tcsc_2023.risk_vuln_management.pdf
- 10:45 → 11:00
  
  Announcements 15m
  
  2023-10-10-Director-Slides-Split-Announcement-Tuesday.pdf
  
  2023-10-10-Director-Slides-Split-Announcement-Tuesday.pptx
- 11:00 → 11:05
  
  School photo 5m
- 11:05 → 11:30
  
  Coffee break 25m
- 11:30 → 12:30
  Logging and traceability 1h
  - host-based logs (system and application level), network monitoring
  - the importance of central logging
  - tools and technologies
  - data privacy, dealing with personal and sensitive data, log retention
  - traceability challenges
  Speaker: David Crooks (UKRI STFC)
  
  Detection_1_2023_as_presented.pdf
  
  Detection_1_2023_as_presented.pptx
  
  Detection_1_2023.pdf
  
  Detection_1_2023.pptx
- 12:30 → 13:15
  
  Lunch 45m
- 13:15 → 14:45
  
  Study time and/or daily sports 1h 30m
- 14:45 → 15:45
  Intrusion detection with SOC: threat intelligence, monitoring, integration and processes 1h
  - indicators of compromise (IoCs), threat intelligence sharing, TLP protocol
  - tools and technologies: MISP, Zeek, OpenSearch etc.
  - deploying a Security Operation Center
  - security incidents: detecting and alerting
  Speaker: David Crooks (UKRI STFC)
  
  Detection_2_2023_as_presented.pdf
  
  Detection_2_2023_as_presented.pptx
  
  Detection_2_2023.pdf
  
  Detection_2_2023.pptx
- 15:45 → 16:15
  
  Coffee break 30m
- 16:15 → 17:15
  
  Student lightning talks 1h
  
  tCSC2023_security_lightning_talks.pdf
- 17:15 → 18:15
  Introduction to web penetration testing 1h
  - web application security, typical web vulnerabilities
  - ethical hacking
  - introduction to pentesting
  Speaker: Sebastian Lopienski (CERN)
  
  Introduction to web penetration testing.pdf
  
  Introduction to web penetration testing.pptx
- 18:15 → 19:15
  
  Penetration testing - exercises 1h
  
  Speaker: Sebastian Lopienski (CERN)
- 19:15 → 20:00
  
  Dinner at MEDILS 45m
Wednesday 11 October
- Sun 8 Oct
- Mon 9 Oct
- Tue 10 Oct
- Wed 11 Oct
- Thu 12 Oct
- Fri 13 Oct
- Sat 14 Oct
- 08:45 → 09:45
  Container security 1h
  - key concepts of containers (namespaces, cgroups etc.) and Docker
  - container security, threat landscape
  - vulnerability and patch management
  Speaker: Daniel Kouřil (CESNET)
  
  container-security.pdf
- 09:45 → 10:45
  
  Container security - exercises 1h
  
  Speaker: Daniel Kouřil (CESNET)
- 10:45 → 11:00
  
  Announcements 15m
  
  2023-10-11-Director-Slides-Split-Announcement-Wednesday.pdf
  
  2023-10-11-Director-Slides-Split-Announcement-Wednesday.pptx
  
  Kristina announcements 1.pdf
  
  Kristina announcements 1.pptx
- 11:00 → 11:30
  
  Coffee break 30m
- 11:30 → 12:30
  Intrusion detection with SOC: deployment and operation 1h
  - indicators of compromise (IoCs), threat intelligence sharing, TLP protocol
  - tools and technologies: MISP, Zeek, OpenSearch etc.
  - deploying a Security Operation Center
  - security incidents: detecting and alerting
  Speaker: David Crooks (UKRI STFC)
  
  Detection_3_2023.pdf
  
  Detection_3_2023.pptx
- 12:30 → 13:15
  
  Lunch 45m
- 13:15 → 18:45
  
  Outdoor excursion 5h 30m
- 18:45 → 20:15
  
  Outside dinner at Kastil Slanica, Omis 1h 30m
  
  https://kastil-slanica.hr/en/
Thursday 12 October
- Sun 8 Oct
- Mon 9 Oct
- Tue 10 Oct
- Wed 11 Oct
- Thu 12 Oct
- Fri 13 Oct
- Sat 14 Oct
- 08:45 → 09:45
  
  Digital forensics: essentials and data acquisition 1h
  
  digital evidence handling
  data acquisition (live systems, storage etc.)
  data analysis (OS, file system, network, executables etc.)
  reporting
  
  Speaker: Daniel Kouřil (CESNET)
  
  forensics-intro.pdf
- 09:45 → 10:45
  
  Defensible security architecture: how to implement security principles 1h
  
  • data security
  • endpoint security: hardware, host, OS, BMC security, system hardening
  • application security
  • future security trends
  
  Speaker: Barbara Krašovec (IJS)
  
  20231012_Defensible_architecture.pdf
- 10:45 → 11:00
  
  Announcements 15m
  
  2023-10-12-Director-Slides-Split-Announcement-Thursday.pdf
  
  2023-10-12-Director-Slides-Split-Announcement-Thursday.pptx
- 11:00 → 11:30
  
  Coffee break 30m
- 11:30 → 12:30
  
  Digital forensics: data analysis 1h
  
  Speaker: Daniel Kouřil (CESNET)
  
  forensics-analysis.pdf
- 12:30 → 13:15
  
  Lunch 45m
- 13:15 → 14:45
  
  Study time and/or daily sports 1h 30m
- 14:45 → 15:45
  
  Incident response management 1h
  
  • incident management and coordination
  • incident analysis and investigation
  • communication with stakeholders
  • containment and eradiction
  • recovery
  • lessons learnt
  
  Speaker: Barbara Krašovec (IJS)
  
  20231012_Incident_response.pdf
- 15:45 → 16:15
  
  Coffee break 30m
- 16:15 → 19:00
  Intrusion detection with SOC and AAI - exercises 2h 45m
  - indicators of compromise, threat intelligence sharing, TLP protocol
  - tools and technologies
  - deploying a Security Operation Center
  - detecting security incidents
  Speakers: David Crooks (UKRI STFC), Mr Tom Dack (Science and Technology Facilities Council STFC (GB))
  
  Detection_workshop_2023_as_presented_backup.pdf
  
  Detection_workshop_2023_as_presented_backup.pptx
  
  Detection_workshop_2023_as_presented.pdf
  
  Detection_workshop_2023_as_presented.pptx
  
  OauthOIDCTokenExercise.pdf
- 19:15 → 20:00
  
  Dinner at MEDILS 45m
Friday 13 October
- Sun 8 Oct
- Mon 9 Oct
- Tue 10 Oct
- Wed 11 Oct
- Thu 12 Oct
- Fri 13 Oct
- Sat 14 Oct
- 08:45 → 10:15
  
  Digital forensics - exercises 1h 30m
  
  Speaker: Daniel Kouřil (CESNET)
  
  forensics-handson.pdf
- 10:15 → 10:30
  
  Coffee break 15m
- 10:30 → 11:45
  
  Introduction to forensics - exercises 1h 15m
  
  Speaker: Daniel Kouřil
- 11:45 → 12:00
  
  Announcements 15m
  
  2023-10-13-Director-Slides-Split-Announcement-Friday.pdf
  
  2023-10-13-Director-Slides-Split-Announcement-Friday.pptx
- 12:00 → 12:30
  
  Penetration testing - exercise debriefing 30m
  
  Speaker: Sebastian Lopienski (CERN)
- 12:30 → 13:15
  
  Lunch 45m
- 13:15 → 14:15
  
  Study time 1h
- 14:15 → 15:00
  
  Exam 45m
- 15:00 → 16:30
  Incident response - exercise 1h 30m
  - incident management and coordination
  - Sirtfi and trust frameworks
  - communication with local users, external communities, and other stakeholders
  - working with law enforcement
  - privacy aspects
  Speakers: Dr David Crooks (UKRI STFC), Romain Wartel (CERN), Sebastian Lopienski (CERN), Mr Tom Dack (Science and Technology Facilities Council STFC (GB))
- 16:30 → 16:45
  
  Coffee break 15m
- 16:45 → 18:00
  Incident response - exercise 1h 15m
  - incident management and coordination
  - Sirtfi and trust frameworks
  - communication with local users, external communities, and other stakeholders
  - working with law enforcement
  - privacy aspects
  Speakers: Dr David Crooks (UKRI STFC), Romain Wartel (CERN), Sebastian Lopienski (CERN), Mr Tom Dack (Science and Technology Facilities Council STFC (GB))
- 18:00 → 18:45
  
  Closing Session 45m
  
  Speaker: Alberto Pace (CERN)
  
  2023-10-13-Director-Slides-Split-Closing-Ceremony.pdf
  
  2023-10-13-Director-Slides-Split-Closing-Ceremony.pptx
- 19:00 → 19:30
  
  Walk to the restaurant 30m
- 19:30 → 21:15
  
  Outside Closing Dinner at Kavanazona (Zona restaurant) 1h 45m
  
  šetalište ivana meštrovića 3
Saturday 14 October
- Sun 8 Oct
- Mon 9 Oct
- Tue 10 Oct
- Wed 11 Oct
- Thu 12 Oct
- Fri 13 Oct
- Sat 14 Oct
- 08:45 → 10:45
  
  Departure 2h

Choose timezone

Thematic CERN School of Computing on Security 2023

MedILS, Split, Croatia

Important Dates