lionel ferette head of cert - terena · intro. belnet at-a-glance • belgian research and...
TRANSCRIPT
![Page 1: Lionel Ferette Head of CERT - TERENA · Intro. BELNET at-a-glance • Belgian Research and Education Network ... The Past. Five years ago • Belgium was an empty spot on CERT maps](https://reader034.vdocuments.us/reader034/viewer/2022043001/5f789b1f63552e02263e52aa/html5/thumbnails/1.jpg)
Five years later
Lionel FeretteHead of CERT
![Page 2: Lionel Ferette Head of CERT - TERENA · Intro. BELNET at-a-glance • Belgian Research and Education Network ... The Past. Five years ago • Belgium was an empty spot on CERT maps](https://reader034.vdocuments.us/reader034/viewer/2022043001/5f789b1f63552e02263e52aa/html5/thumbnails/2.jpg)
Intro
![Page 3: Lionel Ferette Head of CERT - TERENA · Intro. BELNET at-a-glance • Belgian Research and Education Network ... The Past. Five years ago • Belgium was an empty spot on CERT maps](https://reader034.vdocuments.us/reader034/viewer/2022043001/5f789b1f63552e02263e52aa/html5/thumbnails/3.jpg)
BELNET at-a-glance
• Belgian Research and Education Network
• ISP for all Belgian universities
• But also:
• Federal Government
• BNIX: Belgian National Internet eXchange
![Page 4: Lionel Ferette Head of CERT - TERENA · Intro. BELNET at-a-glance • Belgian Research and Education Network ... The Past. Five years ago • Belgium was an empty spot on CERT maps](https://reader034.vdocuments.us/reader034/viewer/2022043001/5f789b1f63552e02263e52aa/html5/thumbnails/4.jpg)
The BELNET Network
![Page 5: Lionel Ferette Head of CERT - TERENA · Intro. BELNET at-a-glance • Belgian Research and Education Network ... The Past. Five years ago • Belgium was an empty spot on CERT maps](https://reader034.vdocuments.us/reader034/viewer/2022043001/5f789b1f63552e02263e52aa/html5/thumbnails/5.jpg)
The Past
![Page 6: Lionel Ferette Head of CERT - TERENA · Intro. BELNET at-a-glance • Belgian Research and Education Network ... The Past. Five years ago • Belgium was an empty spot on CERT maps](https://reader034.vdocuments.us/reader034/viewer/2022043001/5f789b1f63552e02263e52aa/html5/thumbnails/6.jpg)
Five years ago
• Belgium was an empty spot on CERT maps
• Worse, BELNET was one of the very few CERT-less NRENs
• A 2003 user survey showed that security was our customers’ biggest concern
• I got hired at BELNET
![Page 7: Lionel Ferette Head of CERT - TERENA · Intro. BELNET at-a-glance • Belgian Research and Education Network ... The Past. Five years ago • Belgium was an empty spot on CERT maps](https://reader034.vdocuments.us/reader034/viewer/2022043001/5f789b1f63552e02263e52aa/html5/thumbnails/7.jpg)
The Present
![Page 8: Lionel Ferette Head of CERT - TERENA · Intro. BELNET at-a-glance • Belgian Research and Education Network ... The Past. Five years ago • Belgium was an empty spot on CERT maps](https://reader034.vdocuments.us/reader034/viewer/2022043001/5f789b1f63552e02263e52aa/html5/thumbnails/8.jpg)
Today
• We’ll be celebrating five years of BELNET CERT early July
• Manpower: 2.5 FTEs
• Koen Van Impe
• Christian Van Heurck
• Lionel Ferette
![Page 9: Lionel Ferette Head of CERT - TERENA · Intro. BELNET at-a-glance • Belgian Research and Education Network ... The Past. Five years ago • Belgium was an empty spot on CERT maps](https://reader034.vdocuments.us/reader034/viewer/2022043001/5f789b1f63552e02263e52aa/html5/thumbnails/9.jpg)
Services
Security Tools DevelopmentIntrusion DetectionInformation DisseminationRisk AnalysisBusiness Continuity PlanningSecurity ConsultingAwareness BuildingProduct Evaluations
![Page 10: Lionel Ferette Head of CERT - TERENA · Intro. BELNET at-a-glance • Belgian Research and Education Network ... The Past. Five years ago • Belgium was an empty spot on CERT maps](https://reader034.vdocuments.us/reader034/viewer/2022043001/5f789b1f63552e02263e52aa/html5/thumbnails/10.jpg)
Services
Incident HandlingAlerts & WarningsVulnerability HandlingArtefact HandlingAnnouncementsTechnology WatchAudits / AssessmentsConfiguration and Maintenance of tools
Security Tools DevelopmentIntrusion DetectionInformation DisseminationRisk AnalysisBusiness Continuity PlanningSecurity ConsultingAwareness BuildingProduct Evaluations
![Page 11: Lionel Ferette Head of CERT - TERENA · Intro. BELNET at-a-glance • Belgian Research and Education Network ... The Past. Five years ago • Belgium was an empty spot on CERT maps](https://reader034.vdocuments.us/reader034/viewer/2022043001/5f789b1f63552e02263e52aa/html5/thumbnails/11.jpg)
Some Stats
Number of Incidents - BELNETNumber of Incidents - Others
![Page 12: Lionel Ferette Head of CERT - TERENA · Intro. BELNET at-a-glance • Belgian Research and Education Network ... The Past. Five years ago • Belgium was an empty spot on CERT maps](https://reader034.vdocuments.us/reader034/viewer/2022043001/5f789b1f63552e02263e52aa/html5/thumbnails/12.jpg)
More Stats
Number of Advisories
![Page 13: Lionel Ferette Head of CERT - TERENA · Intro. BELNET at-a-glance • Belgian Research and Education Network ... The Past. Five years ago • Belgium was an empty spot on CERT maps](https://reader034.vdocuments.us/reader034/viewer/2022043001/5f789b1f63552e02263e52aa/html5/thumbnails/13.jpg)
However
• Belgium still a black spot on the map of Europe
• NREN and military CSIRTs
• No National / Governmental CSIRT
• Competency officially lies with the telecom regulator
• BELNET CERT used as “last-resort”
![Page 14: Lionel Ferette Head of CERT - TERENA · Intro. BELNET at-a-glance • Belgian Research and Education Network ... The Past. Five years ago • Belgium was an empty spot on CERT maps](https://reader034.vdocuments.us/reader034/viewer/2022043001/5f789b1f63552e02263e52aa/html5/thumbnails/14.jpg)
Tomorrow
![Page 15: Lionel Ferette Head of CERT - TERENA · Intro. BELNET at-a-glance • Belgian Research and Education Network ... The Past. Five years ago • Belgium was an empty spot on CERT maps](https://reader034.vdocuments.us/reader034/viewer/2022043001/5f789b1f63552e02263e52aa/html5/thumbnails/15.jpg)
From BELNET CERT to CERT.be
• In November, BELNET was asked to make a proposal for a National CSIRT
• Proposal rounds ended in February
• Still not formally signed, we are waiting for the lawyers to agree on the contract
![Page 16: Lionel Ferette Head of CERT - TERENA · Intro. BELNET at-a-glance • Belgian Research and Education Network ... The Past. Five years ago • Belgium was an empty spot on CERT maps](https://reader034.vdocuments.us/reader034/viewer/2022043001/5f789b1f63552e02263e52aa/html5/thumbnails/16.jpg)
Project Phases
• Four phases, gradually increasing in manpower and services offering
• Phase 1: this year
• Phase 2: early 2010
• Phase 3: Mid 2012
• Phase 4: Mid 2013
![Page 17: Lionel Ferette Head of CERT - TERENA · Intro. BELNET at-a-glance • Belgian Research and Education Network ... The Past. Five years ago • Belgium was an empty spot on CERT maps](https://reader034.vdocuments.us/reader034/viewer/2022043001/5f789b1f63552e02263e52aa/html5/thumbnails/17.jpg)
Phase 1
• Basic service: alerts, incident co-ordination, ...
• Manpower: 5+1 FTEs
• Constituency: Critical Infrastructure, telecom operators, Federal governments and Federal entities
• Authority: mostly based on good will
![Page 18: Lionel Ferette Head of CERT - TERENA · Intro. BELNET at-a-glance • Belgian Research and Education Network ... The Past. Five years ago • Belgium was an empty spot on CERT maps](https://reader034.vdocuments.us/reader034/viewer/2022043001/5f789b1f63552e02263e52aa/html5/thumbnails/18.jpg)
Phase 2
• Same Services
• Constituency is extended to the greater public
• Manpower: 6+1
• Authority: should shift towards legal authority
![Page 19: Lionel Ferette Head of CERT - TERENA · Intro. BELNET at-a-glance • Belgian Research and Education Network ... The Past. Five years ago • Belgium was an empty spot on CERT maps](https://reader034.vdocuments.us/reader034/viewer/2022043001/5f789b1f63552e02263e52aa/html5/thumbnails/19.jpg)
Phase 3
• Extension of the services offering, extension of opening hours
• Manpower: 8+1 FTEs
• Constituency unchanged
• Authority hopefully full legal authority
![Page 20: Lionel Ferette Head of CERT - TERENA · Intro. BELNET at-a-glance • Belgian Research and Education Network ... The Past. Five years ago • Belgium was an empty spot on CERT maps](https://reader034.vdocuments.us/reader034/viewer/2022043001/5f789b1f63552e02263e52aa/html5/thumbnails/20.jpg)
Phase 4
• Full service offering: vulnerability handling, artifact handling, education, consultancy
• Manpower: 10+1 FTEs
• Constituency and authority unchanged
![Page 21: Lionel Ferette Head of CERT - TERENA · Intro. BELNET at-a-glance • Belgian Research and Education Network ... The Past. Five years ago • Belgium was an empty spot on CERT maps](https://reader034.vdocuments.us/reader034/viewer/2022043001/5f789b1f63552e02263e52aa/html5/thumbnails/21.jpg)
Challenges
• Hiring
• Relation with the telecom regulator
• Addressing the greater public
![Page 22: Lionel Ferette Head of CERT - TERENA · Intro. BELNET at-a-glance • Belgian Research and Education Network ... The Past. Five years ago • Belgium was an empty spot on CERT maps](https://reader034.vdocuments.us/reader034/viewer/2022043001/5f789b1f63552e02263e52aa/html5/thumbnails/22.jpg)
Thank you!