Difference between revisions of "AFSecurity Seminar"

From mn/ifi/AFSecurity
Jump to: navigation, search
Line 1: Line 1:
−
== 1) ''How to Attack and Defend Wind Farms'' and 2) ''How OSINT is Used to Penetrate Infrastructure Assets'' ==
 
−
 
 
{| border="0" cellpadding="1" cellspacing="1" width="100%"
 
{| border="0" cellpadding="1" cellspacing="1" width="100%"
 
|-
 
|-
−
| '''TIME:'''&nbsp; Tuesday 29 November 2022, 12:00h<br />'''PLACE:'''&nbsp;  Auditorium Smalltalk, 1th floor, IFI, UiO, Ole Johan Dahls hus, Gaustadalleen 23b, Oslo. [https://kart.finn.no/?lng=10.71782&lat=59.94342&zoom=17&mapType=normap&markers=10.71782,59.94342,r,Gaustadall%C3%A9en+23B See map].<br />
+
| '''TIME:'''&nbsp; Monday 30 Januar 2023, 14:00h<br />'''PLACE:'''&nbsp;  Kristen Nygaards Hall (Room 5370), 5th floor, IFI, UiO, Ole Johan Dahls hus, Gaustadalleen 23b, Oslo. [https://kart.finn.no/?lng=10.71782&lat=59.94342&zoom=17&mapType=normap&markers=10.71782,59.94342,r,Gaustadall%C3%A9en+23B See map].<br />
−
All interested are welcome. Coffee and snaks served.<br />
+
Coffee and snacks will be served.<br />
 
<br />'''AGENDA:'''<br />
 
<br />'''AGENDA:'''<br />
−
14:00 Invited talk<br />
+
14:00h Welcome at IFI and AF''Security''<br />14:15 Invited talk<br />
−
* TITLE: ''How to Attack and Defend Wind Farms'' &nbsp;
+
* TITLE: ''Usable and Secure Identity Management at RI CODE - From Prevention to Reaction'' &nbsp;
−
* SPEAKER: Sujeet Shenoi, University of Tulsa, USA
+
* SPEAKER: Daniela Pöhn, Universität der Bundeswehr München, Germany
−
| <center>[[File:photo-Sujeet-Shenoi.jpg|150px|link=https://faculty.utulsa.edu/faculty/sujeet-shenoi/]]</center>
+
| <center>[[File:photo-Daniela-Poehn.jpg|150px|link=https://dpoehn.de]]</center>
−
| <center>[[File:Logo-Tulsa.jpg|150px|link=https://utulsa.edu/]]</center>
+
| <center>&nbsp;&nbsp;[[File:logo-unibw.png|300px|link=https://www.unibw.de/home-en]]</center>
 
|}
 
|}
−
* ABSTRACT:<br />As modern society grows more reliant on wind energy, wind farm deployments will become increasingly attractive targets for malicious entities. The geographic scale of wind farms, remoteness of assets, flat logical control networks and insecure control protocols expose wind farms to a myriad of threats. This presentation describes the anatomy of a generic wind farm and the attack vectors that can be leveraged to target its information technology, industrial control system and physical assets.  It discusses attack scenarios involving unauthorized wind turbine control, wind turbine damage, wind farm disruption and damage, and substation disruption and damage.  Additionally, it highlights mitigation techniques that provide robust security coverage and reduce negative cyber and physical impacts. The attack surface, targets, scenarios and mitigation techniques presented are common across wind farm deployments.  However, it is still possible to add details about the unique aspects of wind farm assets, configurations and operations in order to develop a holistic risk management program geared for a specific wind farm deployment.<br />
+
* ABSTRACT:<br />The use of digital identities in today's world is so widespread that you could collect a profile of a person's online activities. This includes usernames, passwords, search history, birthdate, purchase history, and further information. Due to the numerous personal information, it is important to secure all entities involved in handling digital identities. One aspect is authentication: many services apply passwords, although different attacks are known. In order to improve security, different authentication methods and their linkage to account networks need to be regarded. But prevention is one side of the medal. If incidents happen, they need to be identified and handled accordingly. This talk provides an overview of different aspects to increase usability and security for identity management throughout the lifecycle.<br />
−
<br />15:15 Invited talk<br />
 
−
* TITLE: ''How OSINT is Used to Penetrate Infrastructure Assets'' &nbsp;
 
−
* SPEAKER: Sujeet Shenoi, University of Tulsa, USA
 
−
* ABSTRACT:<br />OSINT (Open Source Intelligence) is the activity of using openly and publicly available information for doing reconnaissance about a person or an organization. OSINT is used by threat actors as part of the reconnaissance step which is the first step in the Cyber Kill Chain, to find out how targets can be attacked, and to be used as part of an attack. It is therefore obvious that organizations and individuals have an interest in limiting or reducing the amount of information that OSINT can produce about oneself. This talk presents how OSINT is typically used as a preparation for attacks against assets and also discusses how organizations can reduce the potential of OSINT against themselves, to mitigate threat scenarios and to reduce vulnerabilities.<br />
 
−
<br />15:45 Discussion<br />
 
−
 
 
−
'''BIO:''' &nbsp; Sujeet Shenoi is the F.P. Walter Professor of Computer Science and a Professor of Chemical Engineering at the University of Tulsa, Tulsa, Oklahoma.  An active researcher with specialties in cyber security, cyber operations, critical infrastructure protection and digital forensics, Dr. Shenoi works on exciting “problems” ranging from helping solve homicides to penetrating telecommunications systems, oil and gas pipelines, wind farms and voting machines.  He spearheads the University of Tulsa's elite Cyber Corps Program that trains “MacGyvers” for U.S. government agencies. For his innovative strategies integrating academics, research and service, Dr. Shenoi was named the 1998-1999 U.S. Professor of the Year by the Carnegie Foundation.
 
  
−
 
+
'''BIO:''' &nbsp;
−
<br /><br />
+
<br />Daniela Pöhn is a senior researcher at the research institute (RI) CODE at the Universität der Bundeswehr München. As an active researcher with a focus on identity management and social engineering, Daniela Pöhn has been working on several identity federation projects, including eduGAIN and the Bavarian eID. At the same time, she is actively involved in projects related to interactive cyber training. She was doing her doctorate at the Ludwig Maximilians University of Munich while working at the Leibniz Supercomputing Centre.
  
 
{| border="0" cellpadding="1" cellspacing="1" width="90%"
 
{| border="0" cellpadding="1" cellspacing="1" width="90%"

Revision as of 12:06, 10 January 2023

TIME:  Monday 30 Januar 2023, 14:00h
PLACE:  Kristen Nygaards Hall (Room 5370), 5th floor, IFI, UiO, Ole Johan Dahls hus, Gaustadalleen 23b, Oslo. See map.

Coffee and snacks will be served.

AGENDA:
14:00h Welcome at IFI and AFSecurity
14:15 Invited talk

  • TITLE: Usable and Secure Identity Management at RI CODE - From Prevention to Reaction  
  • SPEAKER: Daniela Pöhn, Universität der Bundeswehr München, Germany
Photo-Daniela-Poehn.jpg
  Logo-unibw.png
  • ABSTRACT:
    The use of digital identities in today's world is so widespread that you could collect a profile of a person's online activities. This includes usernames, passwords, search history, birthdate, purchase history, and further information. Due to the numerous personal information, it is important to secure all entities involved in handling digital identities. One aspect is authentication: many services apply passwords, although different attacks are known. In order to improve security, different authentication methods and their linkage to account networks need to be regarded. But prevention is one side of the medal. If incidents happen, they need to be identified and handled accordingly. This talk provides an overview of different aspects to increase usability and security for identity management throughout the lifecycle.

BIO:  
Daniela Pöhn is a senior researcher at the research institute (RI) CODE at the Universität der Bundeswehr München. As an active researcher with a focus on identity management and social engineering, Daniela Pöhn has been working on several identity federation projects, including eduGAIN and the Bavarian eID. At the same time, she is actively involved in projects related to interactive cyber training. She was doing her doctorate at the Ludwig Maximilians University of Munich while working at the Leibniz Supercomputing Centre.

AFSecurity-small.png AFSecurity is organised by UiO Digital Security. Logo-uio-english-2022.png Sec-light-360.png
Retrieved from "https://wiki.uio.no/mn/ifi/AFSecurity/index.php?title=AFSecurity_Seminar&oldid=1747"