Working in the academic environment has become impossible without the use of Internet and network services. With all the information out there it has become important to educate IT staff so they could approach security issues in a more systematic and efficient way. Regarding the need to educate local and international system administrators and raise security awareness within academic community, AMRES organised security workshop in Belgrade.
Belgrade Security Workshop 2015 included:
- Security Training
- Security Seminar
Organisation
Workshop was organised under the activities within GEANT3plus project, group GN3+/NA3/T2 “Campus Best Practice”. The goal of these activities is to create and promote the Best Practice Documents (BPDs) in following fields: Physical Infrastructure, Campus Networking, Wireless, Network Monitoring, Real-time Communications and Security. European academic networks, including AMRES, are creating documents which in a simple and clear form present their own experiences in establishing and managing different network services. These documents are then promoted within academic community on a European level in order to educate IT staff and raise the quality of Research and Educational networks.
Security Training was held by COMCERT team (CyberSecurity Foundation) from Poland who already had experiance of holding similar training events.
Goals
Speakers, training instructors and visitors were respected members of European academic networks who presented their own experiences regarding security issues of major network services. The goal of the workshop was to give the opportunity to local and international IT staff to get to know with the BPD documents and to exchange experiences with colleagues from other countries in Europe. These new findings could then help them in their day to day operations.
Venue and date
Workshop was organised on 18-20 March 2015 in Belgrade, Serbia.
| Event Calendar | |
| Wednesday, 18 March 2015 | Security Training, Day 1 |
| Thursday, 19 March 2015 | Security Training, Day 2 |
| Friday, 20 March 2015 | Security Seminar, Day 3 |
Event was held at Holiday Inn hotel, Spanskih Boraca 74, 11070 Belgrade.
Security Training programme
Security Training was intended for system administrators of academic institutions who are involved in maintaining and protecting basic network services. The goal of this training was to review security mechanisms that system administrators use in their day-to-day operations, discover frequent errors and gain knowledge about effective protection mechanisms.
Training participants were divided into teams while each team had 2-4 members. Each team was given separate IT infrastructure (two servers) which should have been protected from potential network attacks. Teams had a goal to secure their network infrastructure and afterwards defend it from the ongoing DDoS attacks. Each team had a goal to maintain service availability and data security despite the ongoing network attacks. After the attack simulations were over, training instructors explained attack vectors and training participants were then aware of the most common errors in their secuirty mechanisms. Participants then had a chance to protect their network services and infrastructure once again but this time with all the common vulnerabilities in mind.
Training programme is given below. Clicking on the presentation title will download presentation slides on your computer, while clicking on the video icon next to presentation title will start playing recorded video material of that particular presentation:
| Wednesday, 18th March 2015 – Security Training day 1 | ||
| 09:15 – 10:00 | Registration for the Training | |
| 10:00 – 11:00 | Training Introduction | |
| 11:00 – 11:30 | Coffee break | |
| 11:30 – 13:00 | Preventive protection of network services | |
| 13:00 – 14:00 | Lunch | |
| 14:00 – 15:30 | Simulation Attacks – phase 1 | |
| 15:30 – 16:00 | Coffee break | |
| 16:00 – 17:30 | Attack explanation and proper protection | |
| Thursday, 19th March 2015 – Security Training day 2 | ||
| 10:00 – 11:00 | Simulation Attacks – phase 2 | |
| 11:30 – 12:00 | Coffee break | |
| 12:00 – 13:00 | Attack explanation and proper protection | |
| 13:00 – 14:00 | Lunch | |
| 14:00 – 15:30 | Simulation Attacks – phase 3 (applying learned principles) | |
| 15:30 – 16:00 | Coffee break | |
| 16:00 – 17:30 | Conclusions | |
Security Training participants
List of training participants is given below:
| Name | Surname | Organization |
| Radislav | Adamović | Farmaceutski fakultet Beograd |
| Aleksandar | Bajić | JU Akademska i istraživačka mreža RS |
| Ivica | Barišić | RCUB |
| Jean | Benoit | Strasbourg University |
| Dušan | Crnogorac | Saobraćajni fakultet Beograd |
| Nada | Đorđević Veselinović | Matematički fakultet Beograd |
| Marko | Eremija | AMRES |
| Marko | Gagović | Saobraćajni fakultet Beograd |
| Nebojša | Ilić | AMRES |
| Nemanja | Ivanović | Šumarski fakultet Beograd |
| Vlatko | Jakimov | MARnet |
| Igor | Janošević | Arhitektonski fakultet Beograd |
| Dragan | Karalić | Biblioteka grada Beograda |
| Krystian | Kochanowski | COMCERT |
| Miloš | Kukoleča | AMRES |
| Miloš | Ljubojević | JU Akademska i istraživačka mreža RS |
| Miroslaw | Maj | COMCERT |
| Jari | Miettinen | CSC/FUNET |
| Ognjen | Milosavljević | RCUB |
| Dušan | Nikezić | Institut Vinča |
| Dawid | Osojca | COMCERT |
| Aleš | Padrta | CESNET, z.s.p.o. |
| Željko | Pavlić | Arhitektonski fakultet Beograd |
| Miloš | Perić | Visoka tehnička škola Niš |
| Michal | Przybylski | CEENET |
| Dušan | Ristić | Filološki fakultet Beograd |
| Saša | Sofijanić | Šumarski fakultet Beograd |
| Andirjana | Todosijević | AMRES |
| Rastko | Vasiljević | FON Beograd |
| Duško | Višić | Matematički fakultet Beograd |
| Bojan | Vitnik | FFH Beograd |
| Miloš | Zdravković | RCUB |
| Ivana | Živković | AMRES |
| Sanja | Simonova | MARnet |
| Novak | Novakov | MARnet |
Security Seminar programme
Security Seminar was held at third day of Belgrade Security Workshop 2015. The goal of seminar was to promote Best Practice Documents (BPDs) which were produced during the Campus Best Practice task within the GEANT project. Speakers from 4 European countries presented best practices of their respective NRENs. Seminar program is given below:
| Friday, 20th March 2015 – Security Seminar | ||
| 09:15 – 10:00 | Registration for the Seminar | Welcome cocktail | |
| 10:00 – 10:15 | Welcome note  |
Jari Miettinen |
| 10:15 – 10:30 | Training summary |
Miroslaw Maj |
| 10:30 – 11:00 | Recommended ICT security architecture in the HE sector |
Øivind Høiem, UNINET |
| 11:00 – 11:30 | DNSSEC operational experiences and recommendations |
Antti Ristimäki, CSC/FUNET |
| 11:30 – 12:00 | Improving DNS reliability and security |
Jean Benoit, Strasbourg University |
| 12:00 – 12:30 | Coffee break | |
| 12:30 – 13:00 | IPv6 security |
Tomas Podermanski, Brno University |
| 13:00 – 13:30 | Log Analysis as a Service using open source scalable systems |
Gurvinder Singh, UNINET |
| 13:30 – 14:00 | Identifying users behind NAT devices |
Matej Gregr, Brno University |
| 14:00 – 15:00 | Lunch | |
| 15:00 – 15:30 | Guidelines for information classification |
Øivind Høiem, UNINET |
| 15:30 – 16:00 | Creating a University CERT |
Jean Benoit, Strasbourg University |
| 16:00 – 16:50 | Forensic analysis |
Aleš Padrta, CESNET CERT |
| 16:50 – 17:00 | Conclusions |
Miloš Kukoleča, AMRES |
Security Seminar participants
List of Seminar participants is given below:
| Name | Surname | Organization |
| Radislav | Adamović | Farmaceutski fakultet Beograd |
| Aleksandar | Bajić | JU Akademska i istraživačka mreža RS |
| Jean | Benoit | Strasbourg University |
| Ratko | Bučić | JUNIS, Niš |
| Dušan | Crnogorac | Saobraćajni fakultet Beograd |
| Miloš | Cvetanović | AMRES |
| Marko | Gagović | Saobraćajni fakultet Beograd |
| Matej | Gregr | Brno University |
| Øivind | Høiem | UNINET |
| Nemanja | Ivanović | Šumarski fakultet Beograd |
| Vlatko | Jakimov | MARnet |
| Bojan | Jakovljević | AMRES |
| Igor | Janošević | Arhitektonski fakultet Beograd |
| Dragan | Karalić | Biblioteka grada Beograda |
| Darko | Kozarski | Poljoprivredni fakultet Beograd |
| Marko | Živanović | ETF Beograd |
| Miloš | Kukoleča | AMRES |
| Miloš | Ljubojević | JU Akademska i istraživačka mreža RS |
| Jari | Miettinen | CSC/FUNET |
| Nikola | Miladinović | Elektrotehnički institut Nikola Tesla |
| Petar | Milić | Univerzitet u Prištini |
| Dušan | Nikezić | Institut Vinča |
| Novak | Novakov | MARnet |
| Aleš | Padrta | CESNET CERT |
| Miloš | Perić | Visoka tehnička škola Niš |
| Tomas | Podermanski | Brno University |
| Michal | Przy | CEENET |
| Dušan | Ristić | Filološki fakultet Beograd |
| Antti | Ristimäki | CSC/FUNET |
| Sanja | Simonova | MARnet |
| Gurvinder | Singh | UNINET |
| Saša | Sofijanić | Šumarski fakultet Beograd |
| Andrijana | Todosijević | AMRES |
| Mladen | Trikoš | Vojna akademija Beogad |
| Rastko | Vasiljević | FON Beograd |
| Bojan | Vitnik | FFH Beograd |
| Dragan | Vranešević | Filološki fakultet Beograd |
| Dušan | Vučković | JUNIS |
| Marko | Vujković | Hemijski fakultet Beograd |
| Marko | Živković | JUNIS |
| Ivana | Živković | AMRES |
Gallery
Photos from the Workshop can be seen here.