SANReN presents TRANSITS I @ 2018 CHPC Conference

4 Dec 2018, 08:30 → 6 Dec 2018, 17:00 Africa/Johannesburg

Century City Conference Centre

TRANSITS provides state of the art, high-quality training to Computer Security and Incident Response Team (CSIRT) personnel, as well as individuals with a bona-fide interest in establishing a CSIRT.

TRANSITS I is aimed at new or potential CSIRT personnel who wish to gain a solid understanding of the main aspects of working in an incident handling and response team. TRANSITS I offers participants a unique opportunity to mix with their peers and discuss security issues in a secured and trusted environment, whilst being tutored by seasoned experts of the European CSIRT community. It offers experience and expertise in Operational, Organisational, Legal and Technical areas which form the knowledge basis of CSIRT personnel.

• Organisational – covers how CSIRTs fit within their organisations and includes planning the team, defining its constituency, determining which services to offer, staffing, communicating with external parties, funding, and obtaining management authority.
• Technical – covers how intruders attack systems and their motivations, how network protocols can be abused, vulnerabilities of operating systems and services, denial-of-service attacks, hiding traces, and information gathering techniques. Includes several practical exercises.
• Operational – covers the incident handling process from initial reports, through triage, investigation, resolution, closure, to post-analysis. Includes practical exercises and a survey of useful tools.
• Legal – covers areas of European legislation likely to affect CSIRTs in their work, and that operatives should be familiar with. This includes data protection, computer misuse, network monitoring, collection of evidence, and working with law enforcement agencies.

Other topics such as PGP keys and relevant RFCs are also covered during the course.

ref: https://tf-csirt.org/transits/transits-events/transits-i/

More information: CSIRT FAQ

The South African National Research Network (SANReN) is sponsoring this training for our beneficiaries in partnership with the Tertiary Education and Research Network of South Africa (TENET).

Tuesday, 4 December

08:30 → 09:00 Registration

http://ccconferencecentre.co.za/contact/
Please proceed to the main CHPC conference registration desk

09:00 → 09:20 Plenary: Introductions (Don)

09:20 → 10:30 Plenary: Group Exercise (All)

10:30 → 11:00 Tea

11:00 → 12:30 Group 1: Organisational (Don)

11:00 → 12:30 Group 2: Operational (Wim)

12:30 → 13:30 Lunch

13:30 → 15:00 Group 1: Organisational (cont.) (Don)

13:30 → 15:00 Group 2: Operational (cont.) (Wim)

15:00 → 15:30 Tea

15:30 → 17:00 Group 1: Organisational (cont.) (Don)

15:30 → 17:00 Group 2: Operational (cont.) (Wim)

18:00 → 22:00 Dinner (sponsored by TENET/RCCPII)

Wednesday, 5 December

09:00 → 10:30 Group 1: Technical (Jeffeny)

09:00 → 10:30 Group 2: Organisational (Don)

10:30 → 11:00 Tea

11:00 → 12:30 Group 1: Technical (cont.) (Jeffeny)

11:00 → 12:30 Group 2: Organisational (cont.) (Don)

12:30 → 13:30 Lunch

13:30 → 14:30 Group 1: Technical (cont.) (Jeffeny)

13:30 → 14:30 Group 2: Organisational (cont.) (Don)

14:30 → 15:00 Group 1: Operational (Wim)

14:30 → 15:00 Group 2: Technical (Jeffeny)

15:00 → 15:30 Tea

15:30 → 17:00 Group 1: Operational (cont.) (Wim)

15:30 → 17:00 Group 2: Technical (cont.) (Jeffeny)

Thursday, 6 December

09:00 → 10:30 Group 1: Operational (cont.) (Wim)

09:00 → 10:30 Group 2: Technical (cont.) (Jeffeny)

10:30 → 11:00 Tea

11:00 → 12:00 Group 1: Operational (cont.) (Wim)

11:00 → 12:00 Group 2: Technical (cont.) (Jeffeny)

12:00 → 12:30 Plenary: PGP/GPG Key Signing Party

12:30 → 13:30 Lunch

13:30 → 15:00 Plenary: Legal (Don, Jeffeny + Dominic)

15:00 → 15:15 Tea

15:15 → 16:15 Plenary: Legal (cont.) (Don, Jeffeny + Dominic)

16:15 → 16:30 Plenary: Conclusion + Certificates