Thematic CERN School of Computing on Security 2023

Name: Thematic CERN School of Computing on Security 2023
Start: 2023-10-08T11:00:00+02:00
End: 2023-10-14T11:00:00+02:00
Location: MedILS, Split, Croatia

8 Oct 2023, 11:00 → 14 Oct 2023, 11:00 Europe/Zagreb

MedILS, Split, Croatia

Meštrovićevo šetalište 45 HR – 21000 Split Croatia

Alberto Pace (CERN), Kristina Gunne (CERN), Andrzej Nowicki (CERN)

Description

The 13th Thematic CERN School of Computing (tCSC security 2023) will take place on October 8- 14, 2023. The theme of the school is "Security of research computing infrastructures" - see the academic programme for more details.

The school is proposed to people working in academia and research institutes, who as part of their job need to ensure security and resilience of computing resources they manage, and want to be prepared to detect and handle possible security incidents.

This school is organized by CERN in collaboration with the Faculty of Science, University of Split. The school will take place in Split, Croatia, and be hosted at the Mediterranean Institute For Life Sciences (MEDILS) Conference Centre. The Centre is a historical renovated building situated in a wooded and landscaped park located on the Adriatic Sea coast, a few kilometers from the centre of Split.

Applications are closed.

Important Dates

Monday 31 July - applications closing at midnight
Wednesday 16 August - invitations sent to the selected participants
Wednesday 6 September - registration fee payment deadline
Sunday 8 October - Saturday 14 October - the school

CERN School of Computing

Computing.School@cern.ch

Sunday 8 October
- Sun 8 Oct
- Mon 9 Oct
- Tue 10 Oct
- Wed 11 Oct
- Thu 12 Oct
- Fri 13 Oct
- Sat 14 Oct
- 12:45
  
  Lunch
- 14:00
  
  Registration
- 1
  
  Self-presentation: 1 minute per person
  
  sCSC2023_self_presentations.pdf
- 2
  
  Welcome to the CERN School of Computing
  
  Speakers: Alberto Pace (CERN), Toni Sculac (University of Split)
  
  2023-10-08-Director-Slides-Split-v8-Pre-Briefing.pdf
  
  2023-10-08-Director-Slides-Split-v8-Pre-Briefing.pptx
- 17:00
  
  Transport to Split
- 17:30
  
  Visit of Split old town
- 19:15
  
  Outside Welcome Dinner at Restaurant Para Di Soto
  
  https://paradisoto.hr/en/main/
Monday 9 October
- Sun 8 Oct
- Mon 9 Oct
- Tue 10 Oct
- Wed 11 Oct
- Thu 12 Oct
- Fri 13 Oct
- Sat 14 Oct
- 3
  
  Opening Session
  
  Speakers: Alberto Pace (CERN), Ivica Puljak (Mayor of Split), Mile Dzelalija (University of Split)
  
  2023-10-09-Director-Slides-Split-Opening.pdf
  
  2023-10-09-Director-Slides-Split-Opening.pptx
  
  sCSC_about_Split_Ivica_Puljak_2023.pdf
  
  sCSC_about_Split_Ivica_Puljak_2023.ppt
- 4
  Security in research and scientific computing
  - computer security: past, present and future
  - current risk landscape
  - most common threats and attack vectors
  - "why are we here?"
  Speaker: Stefan Lueders (CERN)
  
  Computer Security --- Past, Present, Future @ SUMM (2023).pdf
- 5
  
  Announcements
  
  2023-10-09-Director-Slides-Split-Announcement-Monday.pdf
  
  2023-10-09-Director-Slides-Split-Announcement-Monday.pptx
- 11:00
  
  Coffee break
- 6
  
  Identity, authentication, authorisation
  
  • An introduction to the concepts of Identity, Authentication, and Authorization
  • Authentication and authorisation for distributed research
  • Methods for communicating authentication and authorization: Certificates, SAML, OAuth
  • How these technologies fit within research infrastructures
  
  Speaker: Mr Tom Dack (Science and Technology Facilities Council STFC (GB))
  
  IAA-SCSC2023-Glossary.pdf
  
  scsc23-identityAuthNAuthZ.pdf
- 12:30
  
  Lunch
- 7
  
  Study time and/or daily sports
- 8
  
  Security architecture fundamentals
  
  Security architecture fundamentals
  • fundamental security principles
  • develop skills to be a security architect
  • how to design and provide secure computing infrastructure
  • security standards and frameworks
  • physical security
  • network security: segmentation, firewalls, VPNs
  
  Speaker: Barbara Krašovec (IJS)
  
  20231009_Security_architecture.pdf
- 16:00
  
  Coffee break
- 9
  Security operations - lecture 1
  - security operations: history, CERT vs. CSIRT
  - CSIRT organisation and provided services
  - preparations: asset management, security monitoring etc.
  - incident response readiness
  - lessons learned from past incidents
  Speaker: Sven Gabriel
  
  tcsc_2023_sec_ops.pdf
- 10
  Security operations - lecture 2
  - security operations: history, CERT vs. CSIRT
  - CSIRT organisation and provided services
  - preparations: asset management, security monitoring etc.
  - incident response readiness
  - lessons learned from past incidents
  Speaker: Sven Gabriel
- 11
  
  Network design - exercise
  
  Speaker: Barbara Krašovec (ISJ)
  
  20231009_Network_design_exercise.pdf
- 19:15
  
  Dinner at MEDILS
Tuesday 10 October
- Sun 8 Oct
- Mon 9 Oct
- Tue 10 Oct
- Wed 11 Oct
- Thu 12 Oct
- Fri 13 Oct
- Sat 14 Oct
- 12
  
  Virtualisation and cloud security
  
  Virtualisation and cloud security
  • virtualisation security fundamentals
  • cloud service models
  • authentication and key management
  • data security in the cloud
  • DevSecOps
  • security in private and public cloud
  • common threats in the cloud
  • security tools
  
  Speaker: Barbara Krašovec (IJS)
  
  20231010-Cloud-security.pdf
- 13
  Risk and vulnerability management
  - risk analysis and risk mitigation
  - vulnerability lifecycle, monitoring, scanning
  - CVE, CVSS, CPE, CWE and related standards
  - special cases: vulnerable hardware, EOL systems etc.
  Speaker: Sven Gabriel
  
  tcsc_2023.risk_vuln_management.pdf
- 14
  
  Announcements
  
  2023-10-10-Director-Slides-Split-Announcement-Tuesday.pdf
  
  2023-10-10-Director-Slides-Split-Announcement-Tuesday.pptx
- 15
  
  School photo
- 11:05
  
  Coffee break
- 16
  Logging and traceability
  - host-based logs (system and application level), network monitoring
  - the importance of central logging
  - tools and technologies
  - data privacy, dealing with personal and sensitive data, log retention
  - traceability challenges
  Speaker: David Crooks (UKRI STFC)
  
  Detection_1_2023_as_presented.pdf
  
  Detection_1_2023_as_presented.pptx
  
  Detection_1_2023.pdf
  
  Detection_1_2023.pptx
- 12:30
  
  Lunch
- 17
  
  Study time and/or daily sports
- 18
  Intrusion detection with SOC: threat intelligence, monitoring, integration and processes
  - indicators of compromise (IoCs), threat intelligence sharing, TLP protocol
  - tools and technologies: MISP, Zeek, OpenSearch etc.
  - deploying a Security Operation Center
  - security incidents: detecting and alerting
  Speaker: David Crooks (UKRI STFC)
  
  Detection_2_2023_as_presented.pdf
  
  Detection_2_2023_as_presented.pptx
  
  Detection_2_2023.pdf
  
  Detection_2_2023.pptx
- 15:45
  
  Coffee break
- 19
  
  Student lightning talks
  
  tCSC2023_security_lightning_talks.pdf
- 20
  Introduction to web penetration testing
  - web application security, typical web vulnerabilities
  - ethical hacking
  - introduction to pentesting
  Speaker: Sebastian Lopienski (CERN)
  
  Introduction to web penetration testing.pdf
  
  Introduction to web penetration testing.pptx
- 21
  
  Penetration testing - exercises
  
  Speaker: Sebastian Lopienski (CERN)
- 19:15
  
  Dinner at MEDILS
Wednesday 11 October
- Sun 8 Oct
- Mon 9 Oct
- Tue 10 Oct
- Wed 11 Oct
- Thu 12 Oct
- Fri 13 Oct
- Sat 14 Oct
- 22
  Container security
  - key concepts of containers (namespaces, cgroups etc.) and Docker
  - container security, threat landscape
  - vulnerability and patch management
  Speaker: Daniel Kouřil (CESNET)
  
  container-security.pdf
- 23
  
  Container security - exercises
  
  Speaker: Daniel Kouřil (CESNET)
- 24
  
  Announcements
  
  2023-10-11-Director-Slides-Split-Announcement-Wednesday.pdf
  
  2023-10-11-Director-Slides-Split-Announcement-Wednesday.pptx
  
  Kristina announcements 1.pdf
  
  Kristina announcements 1.pptx
- 11:00
  
  Coffee break
- 25
  Intrusion detection with SOC: deployment and operation
  - indicators of compromise (IoCs), threat intelligence sharing, TLP protocol
  - tools and technologies: MISP, Zeek, OpenSearch etc.
  - deploying a Security Operation Center
  - security incidents: detecting and alerting
  Speaker: David Crooks (UKRI STFC)
  
  Detection_3_2023.pdf
  
  Detection_3_2023.pptx
- 12:30
  
  Lunch
- 13:15
  
  Outdoor excursion
- 18:45
  
  Outside dinner at Kastil Slanica, Omis
  
  https://kastil-slanica.hr/en/
Thursday 12 October
- Sun 8 Oct
- Mon 9 Oct
- Tue 10 Oct
- Wed 11 Oct
- Thu 12 Oct
- Fri 13 Oct
- Sat 14 Oct
- 26
  
  Digital forensics: essentials and data acquisition
  
  digital evidence handling
  data acquisition (live systems, storage etc.)
  data analysis (OS, file system, network, executables etc.)
  reporting
  
  Speaker: Daniel Kouřil (CESNET)
  
  forensics-intro.pdf
- 27
  
  Defensible security architecture: how to implement security principles
  
  • data security
  • endpoint security: hardware, host, OS, BMC security, system hardening
  • application security
  • future security trends
  
  Speaker: Barbara Krašovec (IJS)
  
  20231012_Defensible_architecture.pdf
- 28
  
  Announcements
  
  2023-10-12-Director-Slides-Split-Announcement-Thursday.pdf
  
  2023-10-12-Director-Slides-Split-Announcement-Thursday.pptx
- 11:00
  
  Coffee break
- 29
  
  Digital forensics: data analysis
  
  Speaker: Daniel Kouřil (CESNET)
  
  forensics-analysis.pdf
- 12:30
  
  Lunch
- 30
  
  Study time and/or daily sports
- 31
  
  Incident response management
  
  • incident management and coordination
  • incident analysis and investigation
  • communication with stakeholders
  • containment and eradiction
  • recovery
  • lessons learnt
  
  Speaker: Barbara Krašovec (IJS)
  
  20231012_Incident_response.pdf
- 15:45
  
  Coffee break
- 32
  Intrusion detection with SOC and AAI - exercises
  - indicators of compromise, threat intelligence sharing, TLP protocol
  - tools and technologies
  - deploying a Security Operation Center
  - detecting security incidents
  Speakers: David Crooks (UKRI STFC), Mr Tom Dack (Science and Technology Facilities Council STFC (GB))
  
  Detection_workshop_2023_as_presented_backup.pdf
  
  Detection_workshop_2023_as_presented_backup.pptx
  
  Detection_workshop_2023_as_presented.pdf
  
  Detection_workshop_2023_as_presented.pptx
  
  OauthOIDCTokenExercise.pdf
- 19:15
  
  Dinner at MEDILS
Friday 13 October
- Sun 8 Oct
- Mon 9 Oct
- Tue 10 Oct
- Wed 11 Oct
- Thu 12 Oct
- Fri 13 Oct
- Sat 14 Oct
- 33
  
  Digital forensics - exercises
  
  Speaker: Daniel Kouřil (CESNET)
  
  forensics-handson.pdf
- 10:15
  
  Coffee break
- 34
  
  Introduction to forensics - exercises
  
  Speaker: Daniel Kouřil
- 35
  
  Announcements
  
  2023-10-13-Director-Slides-Split-Announcement-Friday.pdf
  
  2023-10-13-Director-Slides-Split-Announcement-Friday.pptx
- 36
  
  Penetration testing - exercise debriefing
  
  Speaker: Sebastian Lopienski (CERN)
- 12:30
  
  Lunch
- 37
  
  Study time
- 38
  
  Exam
- 39
  Incident response - exercise
  - incident management and coordination
  - Sirtfi and trust frameworks
  - communication with local users, external communities, and other stakeholders
  - working with law enforcement
  - privacy aspects
  Speakers: Dr David Crooks (UKRI STFC), Romain Wartel (CERN), Sebastian Lopienski (CERN), Mr Tom Dack (Science and Technology Facilities Council STFC (GB))
- 16:30
  
  Coffee break
- 40
  Incident response - exercise
  - incident management and coordination
  - Sirtfi and trust frameworks
  - communication with local users, external communities, and other stakeholders
  - working with law enforcement
  - privacy aspects
  Speakers: Dr David Crooks (UKRI STFC), Romain Wartel (CERN), Sebastian Lopienski (CERN), Mr Tom Dack (Science and Technology Facilities Council STFC (GB))
- 41
  
  Closing Session
  
  Speaker: Alberto Pace (CERN)
  
  2023-10-13-Director-Slides-Split-Closing-Ceremony.pdf
  
  2023-10-13-Director-Slides-Split-Closing-Ceremony.pptx
- 19:00
  
  Walk to the restaurant
- 19:30
  
  Outside Closing Dinner at Kavanazona (Zona restaurant)
  
  šetalište ivana meštrovića 3
Saturday 14 October
- Sun 8 Oct
- Mon 9 Oct
- Tue 10 Oct
- Wed 11 Oct
- Thu 12 Oct
- Fri 13 Oct
- Sat 14 Oct
- 08:45
  
  Departure

Choose timezone

Thematic CERN School of Computing on Security 2023

MedILS, Split, Croatia

Important Dates