The eduGAIN Security Team will meet in Milan from the 28th to the 29th of November 2022 to discuss current issues related to the eduGAIN security and plan the evolution of the security function for the eduGAIN service for the end of the GEANT GN4-3 project and the beginning of the incoming GEANT GN5-1 one.

Location

Department of Physics

Via Giovanni Celoria, 16 - 20133 Milano

Room: Capannino I (Centro Calcolo on the attached map)

Transport

From Malpensa Airport you have two main options:

Contacts

Davide Vaghetti (local host) - davide.vaghetti@garr.it - +393357779542

Agenda (draft)

November 28th
WhenWhatWho
12:00-14:30Arrival, Registration, Light Lunch
14:30-15:15

eduGAIN:

  • The R&E identity federations
  • The interfederation service infrastructure
  • The governance model
Davide Vaghetti (GARR)
15:15-16:00

GEANT GN4-3 eduGAIN Security Team activities

  • review of three years activities of the eduGAIN Security Team.

Federated Security incidents handling:

  • no incidents reporting at the eduGAIN level.
  • more capabilities at local level (entity/federation).
  • reputation issues.

Sven Gabriel (Nikhef)

Daniel Kouril (CESNET)

16:00-16:30Cofee Break
16:30-17:15

Round table on current threats in the federated identity space:

  • identify abstract types of threats we can deal with in an efficient way.
  • what are the threats that our constituency would like us to follow up.

17:15-18:00

Security Team visibility and engagement with the community and stakeholders organisations:

  • Communication Challenges.
  • Incident simulation proven to be an interesting tool to engage with the community.
  • Raise of self-organized communities built around AAI infrastructure (IdP/SP proxies).

November 29th
WhenWhatWho
9:00-9:45The eduGAIN Service in the GEANT GN5-1 projectDavide Vaghetti (GARR)
9:45-10:30eduGAIN Security function in GN5-1All
10:30-11:00Coffee break
11:00-12:45The road to the eduGAIN CSIRTAll