EUNIS - European University Information Systems

Read the summary from the vulnerability testing workshop held on 25 February 2022 by the EUNIS Information Security SIG.

The purpose of the meeting was to:

• Inform the community about, and raise awareness for the approaches and benefits of spending dedicated time on (in person) vulnerability testing.
• Share experiences (challenges and benefits) based on a Vulnerability Test, performed at UNIT and Oslo University in 2021.

See below the presentations from this meeting:

• Introducing EUNIS Information Security SIG ,Thorsten Küfer, Lead of EUNIS InfoSec SIG / University of Münster, Germany
• Introduction to Vulnerability Testing (what is it, why do it, what are common approaches, tools, types of outcomes), Asbjørn Reglund Thorsen, Lead of EUNIS InfoSec SIG / Sikt, Norway
• Technical setup at Sikt, Asbjørn Reglund Thorsen, Lead of EUNIS InfoSec SIG / Sikt, Norway

• Motivation: Rising number of vulnerabilities in software products
  • Exchange/Hafnium
  • Windows/PrintNightmare
  • Java/Log4j
• Know your network/assets
• Inspired by experience at University of Münster (Greenbone) and Oslo/Porto
• The actual testing: what was done, how was it done, findings and further developments, Espen Grøndahl, University of Oslo Center for IT, Norway
• Options of Holm Security vs Greenbone (David Heed, SUNET, Sweden)
• Empirical experiences, comparison between Nessus (paid version), OpenVAS/Greenbone, John Kallevik, Stavanger University, Norway
• Experiences and future plans at University Porto, Francisco Peixoto, University of Porto, Portugal
• Summary and future plans, Thorsten Küfer, Lead of EUNIS InfoSec SIG / University of Münster, Germany
• Future work, Asbjørn Reglund Thorsen, Lead of EUNIS InfoSec SIG / Sikt, Norway

EUNIS & GÉANT invites you to the GDPR online workshop on 1 April at 10.00 a.m. CET.

This two-hour event will address how GDPR regulations (Schrem-2) change and impact cloud services delivery and security. The focus of the workshop will be on practical approaches, tools and policies to deal with legislative and security aspects concerning cloud service delivery.

The introductory address will be given by Magdalena Rzaca (GÉANT GDPR specialist). You will also hear about various tools and aspects to assess and manage Cloud & Security risks from Slavko Gajin (AMRES, GÉANT Cloud Team), Garvan McFeeley (HEAnet, GÉANT Cloud Team), Christian Fötinger (HS Augsburg) and Denise Dittrich (RTHW Aachen, EUNIS Cloud SIG Lead).

Audience:
CIO’s, security officers, cloud specialists, and those involved in legislative policy and compliance as well as security risk management.

Register here.