[AfrICANN-discuss] AfricaCERT Cybersecurity V: Our Role in the Internet Ecosystem

Mon Sep 30 06:13:41 UTC 2013

Dear Colleagues,

AfricaCERT, the African Computer Emergency Response Team announces 
AfricaCERT V scheduled to be held in Abidjan Cote d'Ivoire from November 
24 to 27 2013 during AfriNIC 19.

Event Calendar includes the following:
----------------------------------------------------
November 24 – 25: Forum of Incident Response and Security Teams – 
Transits I training
November 26 –  APday: Training with JPCERT and KrCERT
November 27 – AfricaCERT Cybersecurity Day. (Hosted by CICERT)

November 24 – 25: Forum of Incident Response and Security Teams – 
Transits I training
--------------------------------------------------------------------------------------------------------------------------

Course Summary

The CSIRT training course aims to develop the knowledge and skills that 
are needed by staff who are members of a Computer Security Incident 
Response Team, who will join such a team, or who are involved in 
creating such a team.

Pre-requisites
Trainees are typically experienced system, network or IT managers. 
(Interested persons from other backgrounds are welcome to contact the 
organizers to discuss the suitability of the course for them). They are 
expected to have an awareness of the security issues involved in 
connecting computers to the Internet. They must be committed to using 
their skills to improve the security of computers and networks. For the 
technical side of the course, familiarity with the normal operation of 
TCP/IP networks, addresses, port numbers and protocols will be assumed.
The following modules are covered:

CSIRT Organization
Describes how CSIRTs fit into their organizations: planning the CSIRT, 
defining the constituency of the team and gaining management authority 
for it, deciding the services the team will offer, working with those 
outside the organization, staffing the CSIRT, funding. Students will 
discuss their own organization and how their team fits into it.

Technical Introduction
A basic introduction to the main attack vectors that malicious parties 
use to attack systems: intruders and their motivations, botnets, network 
protocols and how they can be abused, operating systems and services, 
types of vulnerability, information gathering, breaking in, hiding 
traces, denial-of-service attacks.

CSIRT Operations
Describes the facilities, systems and tools needed by CSIRTs to operate 
successfully: housing the CSIRT, equipment, e-mail, remote access, 
information and contacts, servers and networks, incident response plans 
and procedures, tracking systems. As an exercise students will discuss 
and develop incident response plans for their own teams.

Legal Issues
A high level overview of the areas of legislation that are likely to 
affect CSIRTs in their work and that team members need to be aware of: 
origins of computer legislation, problems, data protection, computer 
misuse, working with law enforcement, monitoring, evidence.

How to Apply:

In order for your application to be processed efficiently, we request 
that you send your application to project(at)africacert.org with:
- in the subject : africacert V - Forum of Incident Response and 
Security Teams Training.
- providing the information specified below:

*** Full Name, address and short description (maximum 200 words) of the 
organization by which the applicant is employed.

Note: It is very important that you provide us with your personal 
institutional email address and not a generic one or an online service.
This is to ensure good communications and to verify the validity of the 
application.

*** Name, job title, postal address, phone and fax number and e-mail 
address of the person at management level within this organization who 
supports the application and can provide more information about the 
applicant.

*** Team Information (if team in operation); contact information and 
Charter according to RFC 2350 -  (http://www.ietf.org/rfc/rfc2350.txt)

NOTE:  Applications will be accepted on a FIRST-COME-FIRST-SERVED basis.

Selection criteria will include the education and experience of the 
applicants, the contribution that they will be able to make to the 
overall security of the Internet. The workshop organizers may ask advice 
on the applications from the managers of the applicants and from 
appropriate members of the African Internet community.

Time Schedule
18 October 2013: Deadline for applications. Applications received after 
this date will only be accepted if there are places on the course.

November 26 –  APday: Training with JPCERT and KrCERT
------------------------------------------------------------------------------
This is one day training course on Network Monitoring and Traffic 
Analysis (Advanced)

November 27 – AfricaCERT Cybersecurity Day. (Hosted by CICERT)
-------------------------------------------------------------------------------------------
One Day Closed Meeting about:
- The draft African convention on cyber security
- The Role of CERT Teams in the Internet Ecosystem
- CERT Update
- Incident response
- Technical challenges
- Tools and solutions
- Law Enforcement Readiness

About AfricaCERT. (see - http://www.africacert.org).
AfricaCERT is the African forum of computer incident response teams who 
cooperatively handles computer security incidents and promotes incident 
prevention programs.

About AfriNIC. (See - http://www.afrinic.net/).
AfriNIC  is the Regional Internet Registry (RIR), responsible for 
Internet Number resources Management in the Africa region.

About JPCERT/CC. (see - http://www.jpcert.or.jp).
JPCERT/CC  is the first Computer Security Incident Response Team 
established in Japan. The organization
coordinates with network service providers, security vendors, government 
agencies, as well as the industry associations.

About KrCERT/CC. (see - http://eng.krcert.or.kr/).
KrCERT/CC is the Korea Internet Security Center.

About FIRST - Improving Security Together. (see - http://www.first.org).
FIRST is the Forum of Incident Response and Security Teams.
FIRST brings together a wide variety of security and incident response 
teams including especially
product security teams from the government, commercial, and academic 
sectors.

About CI-CERT. (See - http://www.cicert.ci).
CI-CERT is the Computer Emergency Response Team of Cote d'Ivoire.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.afrinic.net/pipermail/africann/attachments/20130930/6add7b62/attachment.html>
-------------- next part --------------
1.Name of the Team
1.1 Address
1.2.Time Zone
1.3. Telephone Number
1.4. Facsimile Number
1.5. Other Telecommunication
1.6. Electronic Mail Address
1.7. Public Keys and Encryption Information (if you don't have one now it is ok)
1.8. Other Information
1.9. Points of Customer Contact
(if the team is in operation)
2. Charter
2.1. Mission Statement
2.2. Constituency
2.3. Sponsorship and/or Affiliation
2.4. Authority