<html>

  <head>

    <meta http-equiv="content-type" content="text/html; charset=windows-1252">

  </head>

  <body text="#000000" bgcolor="#FFFFFF">

    <br>

    <div class="moz-forward-container">

      <meta http-equiv="content-type" content="text/html;

        charset=windows-1252">

      Dear Colleagues,<br>

      <div class="moz-forward-container">

        <div class="moz-forward-container">

          <div class="moz-forward-container">

            <div class="moz-forward-container">

              <div class="moz-forward-container">

                <div class="moz-forward-container">

                  <div class="moz-forward-container">

                    <div class="moz-forward-container">

                      <div class="moz-forward-container">

                        <div class="moz-forward-container">

                          <div class="moz-forward-container"><font

                              face="Times New Roman"> <br>

                              AfricaCERT, the African Computer Emergency

                              Response Team announces AfricaCERT V

                              scheduled to be held in Abidjan Cote

                              d'Ivoire from November 24 to 27 2013

                              during AfriNIC 19.<br>

                              <br>

                              Event Calendar includes the following:<br>

----------------------------------------------------<br>

                              <span style="font-family:"Times New

                                Roman","serif"">November

                                24 Ц 25: <span style="background-color:

                                  white; background-position: initial

                                  initial; background-repeat: initial

                                  initial; ">Forum of Incident Response

                                  and Security Teams</span> Ц Transits I

                                training</span><br>

                              <span style="font-family:"Times New

                                Roman","serif""> </span>November

                              26 Ца APday: Trainingа <span

                                style="mso-spacerun:yes">with JPCERT and

                                KrCERT</span><br>

                              <span style="mso-spacerun:yes"> </span>November

                              27 Ц AfricaCERT Cybersecurity Day. (Hosted

                              by CICERT)<br>

                              <br>

                              а<br>

                              <span style="font-family:"Times New

                                Roman","serif"">November

                                24 Ц 25: <span style="background-color:

                                  white; background-position: initial

                                  initial; background-repeat: initial

                                  initial; ">Forum of Incident Response

                                  and Security Teams</span> Ц Transits I

                                training</span><br>

--------------------------------------------------------------------------------------------------------------------------<br>

                              <br>

                              Course Summary<br>

                              <br>

                              The CSIRT training course aims to develop

                              the knowledge and skills that are needed

                              by staff who are members of a Computer

                              Security Incident Response Team, who will

                              join such a team, or who are involved in

                              creating such a team.<br>

                              <br>

                              Pre-requisites<br>

                              Trainees are typically experienced system,

                              network or IT managers. (Interested

                              persons from other backgrounds are welcome

                              to contact the organizers to discuss the

                              suitability of the course for them). They

                              are expected to have an awareness of the

                              security issues involved in connecting

                              computers to the Internet. They must be

                              committed to using their skills to improve

                              the security of computers and networks.

                              For the technical side of the course,

                              familiarity with the normal operation of

                              TCP/IP networks, addresses, port numbers

                              and protocols will be assumed.<br>

                              The following modules are covered:<br>

                              <br>

                              CSIRT Organization<br>

                              Describes how CSIRTs fit into their

                              organizations: planning the CSIRT,

                              defining the constituency of the team and

                              gaining management authority for it,

                              deciding the services the team will offer,

                              working with those outside the

                              organization, staffing the CSIRT, funding.

                              Students will discuss their own

                              organization and how their team fits into

                              it.<br>

                              <br>

                              Technical Introduction<br>

                              A basic introduction to the main attack

                              vectors that malicious parties use to

                              attack systems: intruders and their

                              motivations, botnets, network protocols

                              and how they can be abused, operating

                              systems and services, types of

                              vulnerability, information gathering,

                              breaking in, hiding traces,

                              denial-of-service attacks.<br>

                              <br>

                              CSIRT Operations<br>

                              Describes the facilities, systems and

                              tools needed by CSIRTs to operate

                              successfully: housing the CSIRT,

                              equipment, e-mail, remote access,

                              information and contacts, servers and

                              networks, incident response plans and

                              procedures, tracking systems. As an

                              exercise students will discuss and develop

                              incident response plans for their own

                              teams.<br>

                              <br>

                              Legal Issues<br>

                              A high level overview of the areas of

                              legislation that are likely to affect

                              CSIRTs in their work and that team members

                              need to be aware of: origins of computer

                              legislation, problems, data protection,

                              computer misuse, working with law

                              enforcement, monitoring, evidence.<br>

                              <br>

                              How to Apply:<br>

                              <br>

                              In order for your application to be

                              processed efficiently, we request that you

                              send your application to

                              project(at)africacert.org with:<br>

                              - in the subject : africacert V - Forum of

                              Incident Response and Security Teams

                              Training.<br>

                              - providing the information specified

                              below:<br>

                              <br>

                              *** Full Name, address and short

                              description (maximum 200 words) of the

                              organization by which the applicant is

                              employed.<br>

                              <br>

                              Note: It is very important that you

                              provide us with your personal

                              institutional email address and not a

                              generic one or an online service. <br>

                              This is to ensure good communications and

                              to verify the validity of the application.

                              <br>

                              <br>

                              *** Name, job title, postal address, phone

                              and fax number and e-mail address of the

                              person at management level within this

                              organization who supports the application

                              and can provide more information about the

                              applicant.<br>

                              <br>

                              *** Team Information (if team in

                              operation); contact information and

                              Charter according to RFC 2350 -а (<a

                                moz-do-not-send="true"

                                href="http://www.ietf.org/rfc/rfc2350.txt">http://www.ietf.org/rfc/rfc2350.txt</a>)<br>

                              <br>

                              NOTE:а Applications will be accepted on a

                              FIRST-COME-FIRST-SERVED basis.<br>

                              <br>

                              Selection criteria will include the

                              education and experience of the

                              applicants, the contribution that they

                              will be able to make to the overall

                              security of the Internet. The workshop

                              organizers may ask advice on the

                              applications from the managers of the

                              applicants and from appropriate members of

                              the African Internet community.<br>

                              <br>

                              Time Schedule<br>

                              18 October 2013: Deadline for

                              applications. Applications received after

                              this date will only be accepted if there

                              are places on the course.<br>

                              <br>

                              November 26 Ца APday: Trainingа <span

                                style="mso-spacerun:yes">with JPCERT and

                                KrCERT</span><br>

                              <span style="mso-spacerun:yes">------------------------------------------------------------------------------</span><br>

                              <span style="mso-spacerun:yes">This is one

                                day training course on </span>Network

                              Monitoring and Traffic Analysis (Advanced)<br>

                              <br>

                              November 27 Ц AfricaCERT Cybersecurity

                              Day. (Hosted by CICERT)<br>

-------------------------------------------------------------------------------------------<br>

                              One Day Closed Meeting about:<br>

                              - The draft African convention on cyber

                              security <br>

                              - The Role of CERT Teams in the Internet

                              Ecosystem<br>

                              - CERT Update <br>

                              - Incident response<br>

                              - Technical challenges<br>

                              - Tools and solutions <br>

                              - Law Enforcement Readiness<br>

                              <br>

                              About AfricaCERT. (see - <a

                                moz-do-not-send="true"

                                class="moz-txt-link-freetext"

                                href="http://www.africacert.org">http://www.africacert.org</a>).<br>

                              AfricaCERT is the African forum of

                              computer incident response teams who

                              cooperatively handles computer security

                              incidents and promotes incident prevention

                              programs.<br>

                              <br>

                              About AfriNIC. (See - <a

                                moz-do-not-send="true"

                                class="moz-txt-link-freetext"

                                href="http://www.afrinic.net/">http://www.afrinic.net/</a>).<br>

                              AfriNICа is the Regional Internet Registry

                              (RIR), responsible for Internet Number

                              resources Management in the Africa region.<br>

                              <br>

                              About JPCERT/CC. (see - <a

                                moz-do-not-send="true"

                                class="moz-txt-link-freetext"

                                href="http://www.jpcert.or.jp">http://www.jpcert.or.jp</a>).<br>

                              JPCERT/CCа is the first Computer Security

                              Incident Response Team established in

                              Japan. The organization<br>

                              coordinates with network service

                              providers, security vendors, government

                              agencies, as well as the industry

                              associations.<br>

                              <br>

                              About KrCERT/CC. (see - <a

                                moz-do-not-send="true"

                                class="moz-txt-link-freetext"

                                href="http://eng.krcert.or.kr/">http://eng.krcert.or.kr/</a>).<br>

                              KrCERT/CC is the Korea Internet Security

                              Center.<br>

                              <br>

                              About FIRST - Improving Security Together.

                              (see - <a moz-do-not-send="true"

                                class="moz-txt-link-freetext"

                                href="http://www.first.org">http://www.first.org</a>).<br>

                              FIRST is the Forum of Incident Response

                              and Security Teams.<br>

                              FIRST brings together a wide variety of

                              security and incident response teams

                              including especially<br>

                              product security teams from the

                              government, commercial, and academic

                              sectors.<br>

                            </font><br>

                            About CI-CERT. (See - <a

                              moz-do-not-send="true"

                              class="moz-txt-link-freetext"

                              href="http://www.cicert.ci">http://www.cicert.ci</a>).<br>

                            CI-CERT is the Computer Emergency Response

                            Team of Cote d'Ivoire.<br>

                            <br>

                            <br>

                          </div>

                          <br>

                          <br>

                        </div>

                        <br>

                        <br>

                      </div>

                      <br>

                      <br>

                    </div>

                    <br>

                    <br>

                  </div>

                  <br>

                  <br>

                </div>

                <br>

                <br>

              </div>

              <br>

              <br>

            </div>

            <br>

            <br>

          </div>

          <br>

          <br>

        </div>

        <br>

        <br>

      </div>

      <br>

      <br>

    </div>

    <br>

  </body>

</html>