This is a past event. Registration is closed. View other ETIS events.
Members of the ETIS CERT-SOC working group are invited to register for our next physical meeting which will be hosted by Deutsche Telekom in Bonn, Germany.
Registrations are now closed.
The draft programme of our 2-day event is available below on this page. The programme is updated on a weekly bases, as presentation proposals arrive.
HOTELS:
Our meeting venue is outside the city center but reachable by tram and bus from the center.
In the city center, good options are Motel One Bonn-Beethoven or Motel One Bonn-Hauptbahnhof - both are well connected with public transport (20' ride more or less):
https://www.booking.com/Share-x6ZtEZy
https://www.booking.com/Share-4TUo2Dl
Not so far from these is also the Dorint hotel:
The hotel closest to the event is the Kameha Grand. You can make your reservation via their website or booking.com to get maybe a better deal. https://www.kamehabonn.de/
Maritim Hotel Bonn:
https://www.booking.com/Share-INsXcU
There is a tram over the bridge but stations are apart on both sides so it might be more like a walk on the bridge crossing Rhine river.
There are stops of direct tram/bus close to the meeting location.
AIRPORTS:
The closest international airport is the Cologne-Bonn one, with a stable 45-50 min train connection to the Bonn main station in the city centre.
SOCIAL PROGRAMME:
Included in the agenda below, for Wednesday and Thursday.
Agenda
7
30PM
-
10
00PM
Informal dinner&drinks in Bonn (not sponsored)
For anyone arriving earlier on Wednesday, we have 40 seats reserved in "Boennsch Brauhaus" (https://www.boennsch.de/kontakt/) (you can follow this link to guide you there: https://maps.app.goo.gl/RV13gC1QWP4eyrWk6)
Thursday, April 18, 2024
8
30AM
-
9
00AM
Registration starts on the 3rd floor
Upon entering the venue, go past the reception directly to the elevator and on the 3rd floor there will be a registration desk, along with welcome coffee & tea.
9
00AM
-
9
35AM
Welcome from the Hosts, Organisers and Sponsors
MEETING ROOM: Cologne 2
Welcome to both groups:
- Dr. Stefan Pütz, DT CISO, 20' welcome speech & presentation
- Mr. Wim De Meyer & Mr. Andrija Višić, ETIS Central Office, "Updates from ETIS" (5 min speech)
- Sponsors welcome (Dmarcian; Recorded Future; Spamhaus - 3 min speech each)
9
35AM
-
9
40AM
9
40AM
-
9
50AM
Introductions Roundtable (Telco-Only)
MEETING ROOM: Cologne 1
9
50AM
-
11
00AM
Company Updates (Telco-Only)
MEETING ROOM: Cologne 1
Each company is allocated 3 minutes to present recent challenges, threats, incidents, projects, and future plans. Also delivering expectations from this 2-day meeting.
11
00AM
-
11
30AM
11
30AM
-
1
00PM
How to do Red Teaming and Purple Teaming exercises (Telco-Only)
MEETING ROOM: Cologne 1
Presentations from:
- "Purple teaming exercises in KPN", Jesse Helder, KPN, 30' + Q&A
- Presentation by Hugo Azevedo & Jean-Marie Bourbon, POST Luxembourg, 30' + Q&A
1
00PM
-
2
00PM
2
00PM
-
3
00PM
Vulnerability management – A threat led approach (Telco-Only)
MEETING ROOM: Cologne 1
Presentations from telco representatives + discussion
Confirmed:
- Hannah Simes, BT, 30'
- Q&A & discussion session in the remaining time
3
00PM
-
3
30PM
DNS Sinkholing (Telco-Only)
MEETING ROOM: Cologne 1
Presentation by Martin Strassmann, Deutsche Telekom, 30' including Q&A
3
30PM
-
4
00PM
4
00PM
-
5
00PM
Joint Session with Anti-Abuse WG: "Unveiling the Dark Secrets of i-SOON: Insights into China's Cyberspionage Ecosystem"
MEETING ROOM: Cologne 2
Presentation by Julian Kanitz & Gianfranco Gabassi, Recorded Future, 45' + Q&A
6
30PM
-
7
30PM
Walking tour (finishing in the restaurant)
Starting from the entrance of the Main Train Station: https://maps.app.goo.gl/a2fbqsnWNLPA5TPX9
We will take a stroll in the old centre of Bonn and finalise the tour in the restaurant.
7
30PM
-
10
00PM
Community Dinner in a nearby Restaurant
"Matt's Food and Wine"
Königstraße 84, 53115 Bonn, Germany
https://maps.app.goo.gl/8dNChcBgwkTXQTD5A
Friday, April 19, 2024
9
15AM
-
10
15AM
Joint Session with Anti-Abuse: How to train your teams?
MEETING ROOM: Cologne 2
Participants are encourage to speak about methods of training their teams. Exchange of specific viewpoints to take place.
Confirmed presentations:
- Kenneth Aukdal, Telia Company + Q&A
+ Roundtable discussion
10
15AM
-
11
00AM
Joint Session for both Groups: "Suppliers' Demos"
MEETING ROOM: Cologne 2
Each sponsor of the ETIS meeting will have a 15' slot which includes Q&A:
- Dmarcian
- Recorded Future
- Spamhaus
11
00AM
-
11
30AM
11
30AM
-
1
00PM
Measuring KPIs in incident response (Telco-Only)
MEETING ROOM: Cologne 1
A roundtable on How telco CS colleagues measure KPIs in incident response? Do you use matrix? What kind of benchmark, and baseline they use?
Confirmed presentations:
- Bas Van Assche, Proximus, 20'
- Roundtable discussion
1
00PM
-
2
00PM
2
00PM
-
3
30PM
Threat Intelligence Information Sharing (Telco-Only)
MEETING ROOM: Cologne 1
Colleagues presenting the most recent CTI reports:
Deutche Telekom - 2 presentations:
- "Qnap as bait: Explorations in the botnet jungle", 30'
- "TA577 - Tracking a malware distribution ecosystem to fight ransomware attacks", 30'
Lukas Benninger, Swisscom - 1 presentation on smishing, 30'
- Presentation title TBC
3
30PM
-
3
45PM
Wrap up, Outstanding Questions & Future Topics (Telco-Only)
MEETING ROOM: Cologne 1
Roundtable: What to discuss in our next ETIS CERT-SOC WG meeting?
Thursday, April 18, 2024
11
30AM
-
1
00PM
Workshop on SS7 Threats (Telco-Only)
MEETING ROOM: Manchester
Organised and moderated by DT colleagues for the full 90' session.
1
00PM
-
2
00PM
2
00PM
-
3
30PM
Sharing of xSOAR playbooks + a presentation by Telia Company (Telco-Only)
MEETING ROOM: Manchester
Confirmed presentations:
- Bas Van Assche, Proximus, 20'
Q&A
- "Secrets Unleashed: The Hidden World of Passwords, and more...", Christoffer Alstrom, Telia Company, 30'
Friday, April 19, 2024
9
15AM
-
1
00PM
Capture The Flag!
MEETING ROOM: Manchester
A full morning will be dedicated to a CTF, organised by members of our core-team.
1
00PM
-
2
00PM
Sponsors and Partners
SPONSORS
Spamhaus
Spamhaus strengthens trust and safety for the Internet. Advocating for change through sharing reliable intelligence and expertise. As the authority on IP and domain reputation data, Spamhaus is trusted across the industry because of its strong ethics, impartiality, and quality of actionable data. This data not only protects but also provides signal and insight across networks and email worldwide.
https://www.spamhaus.org/
Recorded Future
Recorded Future is the world’s largest threat intelligence company. Recorded Future’s Intelligence Cloud provides end-to-end intelligence across adversaries, infrastructure, and targets. Indexing the internet across the open web, dark web, and technical sources, Recorded Future provides real-time visibility into an expanding attack surface and threat landscape, empowering clients to act with speed and confidence to reduce risk and securely drive business forward. Headquartered in Boston with offices and employees around the world, Recorded Future works with over 1,700 businesses and government organizations across more than 75 countries to provide real-time, unbiased and actionable intelligence. Learn more at recordedfuture.com.
https://www.recordedfuture.com
Dmarcian
Founded in 2012 by one of the primary authors of the DMARC specification, dmarcian is dedicated to upgrading the entire world’s email by making DMARC accessible to all. We achieve this by focusing on the people doing the work and helping them make the world of email and the greater world a better place. We have offices around the world in key locations of North America, Europe and Asia Pacific.
https://dmarcian.com/