GÉANT Security Days 2024

The frequency and diversity of DDoS attacks continue to increase annually. With the rise in computational capabilities, motivated attackers orchestrate large-scale attacks of higher complexity. Contemporary attacks exhibit adaptive behaviour, rendering effective mitigation challenging for conventional DDoS protection systems. The analysis of attacks must be precise - to avoid blocking...

In the realm of cybersecurity, there is a pervasive belief that the threat landscape is in a perpetual state of flux, marked by constant innovation and evolution. This presentation challenges this prevailing narrative, offering a nuanced perspective that highlights the consistent characteristics inherent in cybercrime. Despite the emergence of new tactics and technologies, certain fundamental...

The SOCCER project (Security Operation Centre in Central-Eastern Europe Region) aims to support the establishment and advancement of Security Operations Centres (SOCs) within the participating universities, as well as to share knowledge about SOC development and deplyoment and to foster information sharing among the broad academic cybersecurity commnuity.
The lightning talk will be focused...

A cyber attack not only threatens the continuity of your services, but also forces your organisation to engage with your various stakeholders. How do you ensure that you are prepared to communicate clearly, transparently and professionally when you find yourself in the eye of the storm? This talk is a warm call to work closely with your communications department to develop a plan of action...

CLAW is the crisis management workshop held annually in person and online (so two events, each every year). Since lockdown drove us into the online world, we had to adapt and develop a tool that supports a crisis exercise done online. While the idea back then was “We just need this for the one online edition, we’ll do during COVID and then NEVER AGAIN”, we couldn’t be much more wrong...

Summary
In 2023 GÉANT supported the Cybersecurity Month initiative with its security awareness campaign for the international R&E community: ‘Become a Cyber Hero’. In a month-long journey into the world of cybersecurity, the campaign inspired and educated end-users on topics such as online privacy, phishing, social engineering, ransomware and the importance of reporting cyber...

Introduction: This lightning talk for the upcoming edition of the Security Conference, will shed light on an innovative and practical approach to enhancing cybersecurity in research and education institutions and the urgent need of improvement.

In a rapidly evolving digital landscape, research and education institutions face unique cybersecurity challenges. This 5-minute lightning talk...

Carlos Friaças is the Head of RCTS CERT, the CSIRT for the portuguese NREN.

NETSEC-SIG at FIRST was created in 2022, and it is a group with the mission to foster the deployment of inter-AS network security BCPs, coordinated mitigation, and information sharing.

This lightning talk intends to describe the group's objectives and topics/areas of interest, and at the same time call on new...

In Security, we are trying to protect against many different threats: ransomware, DDoS attacks, phishing/social engineering, data leaks, etc.
In this lightning talk, I will explain why poor UI and UX design can lead to exploitation of some of these threats.
UI and UX are terms commonly used for the user friendliness of applications. UI: User Interface refers to the look of an application,...

CYBERUNITY is an EU-Funded pioneering project aimed at transforming Europe's cybersecurity landscape. Assembled with leading experts and stakeholders from across Europe, this initiative sets out to establish a network of interconnected Cyber Ranges, fostering collaboration and innovation and revolutionising the way cyber defence is conducted. CYBERUNITY’s initial phase involves bringing...

NG-SOC considers the paradigm of interconnecting heterogeneous digital systems where traditional security controls are becoming increasingly inefficient due to the mosaic of the involved data, the plethora of diverse business services and the strong interdependencies between software components residing at interconnected infrastructures, allowing threats and security incidents to propagate...

On 28.03.2023, the ELI Beamlines Facility was hit by a sophisticated ransomware attack. This talk gives insight on the immediate incident response of such an event - and shares a few lessons we learned from that.

GÉANT’s adoption of NeMo presented significant challenges for our security teams. From the tool’s scope to configuration, GÉANT SOC & Security had to transform NeMo — a DDoS initially optimized for the organization that conceived it — into a robust solution capable of securing network uplinks and preventing DDos across the entire GÉANT network. Join Ryan Richford as he explores the hurdles...

Generative Artificial Intelligence (AI) has taken the world by storm since the public release of ChatGPT, an AI-based chatbot, in November 2022. The first reactions were awe and amazement as ChatGPT presented the capability to respond to various text-based questions following a conversational approach. However, ChatGPT’s ability to complete more advanced tasks, such as supplying source code to...