invitation to 45th tf-csirt meeting in poznań · invitation to 45th tf-csirt meeting in pozna ......

38
Invitation to 45th TF-CSIRT Meeting in Poznań 21-22.05.2015 Tomasz A. Nowocień

Upload: others

Post on 26-May-2020

13 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: Invitation to 45th TF-CSIRT Meeting in Poznań · Invitation to 45th TF-CSIRT Meeting in Pozna ... Pionier CERT Established 2001: POL34-CERT Renamed 2004/2005: Pionier CERT AS13293,

Invitation to 45th TF-CSIRT Meeting in Poznań 21-22.05.2015 Tomasz A. Nowocień

Page 2: Invitation to 45th TF-CSIRT Meeting in Poznań · Invitation to 45th TF-CSIRT Meeting in Pozna ... Pionier CERT Established 2001: POL34-CERT Renamed 2004/2005: Pionier CERT AS13293,

Venue

Location: Poznań, Poland

Hosted by PSNC

Page 3: Invitation to 45th TF-CSIRT Meeting in Poznań · Invitation to 45th TF-CSIRT Meeting in Pozna ... Pionier CERT Established 2001: POL34-CERT Renamed 2004/2005: Pionier CERT AS13293,

PSNC

Page 4: Invitation to 45th TF-CSIRT Meeting in Poznań · Invitation to 45th TF-CSIRT Meeting in Pozna ... Pionier CERT Established 2001: POL34-CERT Renamed 2004/2005: Pionier CERT AS13293,

MISSION

Center of e-Infrastructure • National Research and Education Network PIONIER

• Research Metropolitan Area Network - POZMAN

• HPC Center

• Data repositories and Digital Libraries Federation

• Security

Center for R & D • New Generation Networks

• HPC, Grids & Clouds

• Grand challenge applications

• New media and visualization technologies

• Knowledge Platforms

Page 5: Invitation to 45th TF-CSIRT Meeting in Poznań · Invitation to 45th TF-CSIRT Meeting in Pozna ... Pionier CERT Established 2001: POL34-CERT Renamed 2004/2005: Pionier CERT AS13293,

• From 6 people in 1993 to 272 people in 2013

PSNC in numbers

1993 1997 2003 2013 2000 2010

2

4

16

64

128

256

512

6 people

272 people

Page 6: Invitation to 45th TF-CSIRT Meeting in Poznań · Invitation to 45th TF-CSIRT Meeting in Pozna ... Pionier CERT Established 2001: POL34-CERT Renamed 2004/2005: Pionier CERT AS13293,

PSNC in numbers – international R+D projects

103

Together

GRIDLAB

PORTA OPTICA

RINGrid

PHOSPHORUS CoolEmAll

ALIEN

FELIX

DORII

12

SILHOUETTE

ADDONAS

Akcja IC0805

WCT

8 5PR

22 6PR

54 7PR

eContent plus, Eureka, Culture, COST, USA-Poland cooperation, ERANET, PIANO+ etc.

19 Other

Page 7: Invitation to 45th TF-CSIRT Meeting in Poznań · Invitation to 45th TF-CSIRT Meeting in Pozna ... Pionier CERT Established 2001: POL34-CERT Renamed 2004/2005: Pionier CERT AS13293,

PSNC in numbers – national R&D projects

43

Together

PROGRESS

NewMAN

100NET

PLATON

OPTIME

12

KMD

NetRadio

ZSKM

ZPT

POP

KMD2

ARM

3 Targeted

11 R, D, RD

10 Structural

19 Other

Page 8: Invitation to 45th TF-CSIRT Meeting in Poznań · Invitation to 45th TF-CSIRT Meeting in Pozna ... Pionier CERT Established 2001: POL34-CERT Renamed 2004/2005: Pionier CERT AS13293,

Increase in network capacity and computing power

1993 1997 2003 2013 1999 2011 1995 2007

10 000 000

1 000 000

100 000

10 000

1 000

100

10

1

0

2001 2005 2009

Network capacity (Mb/s) Computing power (Gflops)

Page 9: Invitation to 45th TF-CSIRT Meeting in Poznań · Invitation to 45th TF-CSIRT Meeting in Pozna ... Pionier CERT Established 2001: POL34-CERT Renamed 2004/2005: Pionier CERT AS13293,

ZIELONA

GÓRA

KATOWICE

KRAKÓW

LUBLIN

WARSZAWA

BYDGOSZCZ

TORUŃ

CZĘSTOCHOWA

BIAŁYSTOK

OLSZTYN

RZESZÓW Bielsko-Biała

KOSZALIN

SZCZECIN

WROCŁAW

ŁÓDŹ

KIELCE

PUŁAWY

OPOLE

RADOM

CESNET; SANET 2x10 Gb/s

GÉANT2 10+10

Gb/s

CBDF 10Gb/s

Zamość

UKRAINE 1x10 Gb/s

Gorzów

PIONIER network node

2 x 10 Gb/s (2 lambdas)

POZNAŃ

Elbląg Suwałki LITHUANIA 1 x 10 Gb/s

BELARUS 1 x 10 Gb/s

GDAŃSK

RUSSIA (Kaliningrad) 1 x 10 Gb/s

Colorless, directionless and contentionless 80ch DWDM system

Sochaczew

Hamburg (GLIF, Surfnet,

Nordunet)

4x10 Gb/s

National Research and Education Network - PIONIER (transmission)

Page 10: Invitation to 45th TF-CSIRT Meeting in Poznań · Invitation to 45th TF-CSIRT Meeting in Pozna ... Pionier CERT Established 2001: POL34-CERT Renamed 2004/2005: Pionier CERT AS13293,

National Research and Education Network - PIONIER (topology) 2012

• Area 312k sq km

• Population 38M

• Main academic centers 21

• State universities 165+

• Students 2M+

• R&D institutions and Univ. interconnected via PIONIER network 700+

6467 km of fiber infrastructure in Poland

763 km of fiber in Germany (IRU)

7230 km of fiber in total

22 MANs and 5 HPC Centers in PIONIER Consortium with PSNC as Operator

Page 11: Invitation to 45th TF-CSIRT Meeting in Poznań · Invitation to 45th TF-CSIRT Meeting in Pozna ... Pionier CERT Established 2001: POL34-CERT Renamed 2004/2005: Pionier CERT AS13293,

Metropolitan Area Network – POZMAN

220 km of own Fiber Optic Cables in the city of Poznań

• ~550k city population

• 105 connections to R&D institutions & Univ.

• Transmission technologies

10 Gigabit Ethernet with MPLS

• Users access

10 Mbps, 100 Mbps, 155 Mbps, 1 Gbps

Wi-Fi access

Wireless Poznań (+ EDUROAM)

– a joint project Poznań City Hall and PSNC

Page 12: Invitation to 45th TF-CSIRT Meeting in Poznań · Invitation to 45th TF-CSIRT Meeting in Pozna ... Pionier CERT Established 2001: POL34-CERT Renamed 2004/2005: Pionier CERT AS13293,

• HD Videoconference services

• Deployment of eduroam services

• Applications on Demand for campuses

• Archiving on Demand • Science HDTV services service coordinator

main service node

service partner

PLATON Project Service Platform for e-Science

Page 13: Invitation to 45th TF-CSIRT Meeting in Poznań · Invitation to 45th TF-CSIRT Meeting in Pozna ... Pionier CERT Established 2001: POL34-CERT Renamed 2004/2005: Pionier CERT AS13293,

HPC Center • HPC infrastructure • PC clusters • GPGPU clusters • Prototypes on future promising

technologies

• Hierarchical data infrastructure • Fast external source of data (computing) • Part of National Data Storage • Part of European Data Infrastructure

Environment: •300+ sqm of data center •Air, liquid coolled systems •Video monitoring, fire protection •24h monitoring

PSNC is part of: •European HPC infrastructure (PRACE) •European and national grid infrastructure (EGI, PL-GRID) •National (Platon, NDS) and European data infrastructure (EUDAT)

Page 14: Invitation to 45th TF-CSIRT Meeting in Poznań · Invitation to 45th TF-CSIRT Meeting in Pozna ... Pionier CERT Established 2001: POL34-CERT Renamed 2004/2005: Pionier CERT AS13293,

JPEG2000 4K Encoder

Streaming Server

intoPIX SYX-JP4K

JPEG2000 4K Decoder

intoPIX SYX-JP4K

with 2x Pristine4

Stereoscopic

projection system

2x SONY SRX-T105

4K projectors

Sound mixing system

Tascam DM-3200

+AES/EBU active

JBL loudspeakers

4K Player

HD stereo Player

Doremi DSV-J2

4K LCD 56” monitor

Astro DM-3400

+ digital sound

Professional 3D rig

For 2x RED One 4K cameras

Cinematografic

Camera

RED One 4K Post-production station

Mac Pro with Final Cut Pro

and Adobe Production

supported by Neo3D

4K Live extension system

For RED One camera

(Frame grabber)

RED Rocket accelerated

Content storage (48TB)

and distribution center

3x SUN Fire x4540

10GbE PIONIER

Optical network

HD/4K

Streaming

8xHD-SDI

Analog

or digital

Sound

Two synchronized

Stereoscopic 4K

8xHD-SDI

HD/4K

Content

(TIFF, J2K,

MXF, DCP

etc.)

4K Content

(R3D)

HD/4K

Content

D-Cinema

Packages

(MXF/DCP)

HD/4K

Streaming

To or from

Other Nodes

Content storage and retrieving (TIFF, J2K, MXF, DCP, etc.)

HD/4K live 2D or 3D streaming

Two synchronized

Stereoscopic HD-SDI

HDMI

Stereoscopic HD TV

LG 47LD950

Video converter

BlackMagic HDLink3D

HPDMNet

CineGrid

GLIF

GEANT

(JPEG2000

or JPEG)

Graphics

workstation

For software real-time

JPEG decoding

8ch

AES

EBU

HD live cameras

With HDSDI 1080 output

SONY PMW EX3 and

Panasonic AG-3DA1

4k/3D node in PSNC

Page 15: Invitation to 45th TF-CSIRT Meeting in Poznań · Invitation to 45th TF-CSIRT Meeting in Pozna ... Pionier CERT Established 2001: POL34-CERT Renamed 2004/2005: Pionier CERT AS13293,

16K/4K/3D node in PSNC (new setup since 2011)

Ultra high visualization -16K:

• 64 Full HD LCDs • 4 PC with ATI cards • Advanced scientific visualization • Molecular structures

(bio- and nanotechnology) • Geografical data

Software: SAGE, Vitrall, etc.

A new GPU cluster:

• 160TFlops in total, • about 220 nodes • 2x AMD 12-core per node • nVidia Tesla M2070 acceleration • Infiniband QDR FatTree • Applications: radioastronomy, physics, visualizations

Page 16: Invitation to 45th TF-CSIRT Meeting in Poznań · Invitation to 45th TF-CSIRT Meeting in Pozna ... Pionier CERT Established 2001: POL34-CERT Renamed 2004/2005: Pionier CERT AS13293,

New media

Science HD TV Services

16K visualisation

Page 17: Invitation to 45th TF-CSIRT Meeting in Poznań · Invitation to 45th TF-CSIRT Meeting in Pozna ... Pionier CERT Established 2001: POL34-CERT Renamed 2004/2005: Pionier CERT AS13293,

E-Health applications in Future Internet • patient-oriented medical information management

in content aware networks • technical, semantic and organizational

interoperability of telemedicine • usability of distributed telemedical applications

Supporting activity of the elderly • health safety, novel communication and out-of-

home support • innovative care services in urban areas

Teleconsultations • store-and-forward teleconsultations • videoconferencing • telemedical process management in service

oriented environments

Medical teleeducation • educational registry of medical cases • live transmission of surgical operations • high definition and 3D multimedia courses

Telemedicine & e-Health

Page 18: Invitation to 45th TF-CSIRT Meeting in Poznań · Invitation to 45th TF-CSIRT Meeting in Pozna ... Pionier CERT Established 2001: POL34-CERT Renamed 2004/2005: Pionier CERT AS13293,

• Multimedia City Guide, developed since 1998 in co-operation with the Poznan Municipal Office: http://www.poznan.pl

• Platform servicing the City Hall, its departments and units

– 1000+ editors, managing information and services

• The platform of e-Government services for citizens and businesses

• Examples of eServices

– For SMEs (e.g. online business registration)

– For education (e.g. Intake via Internet)

– For citizens (Registry of Vital Statistics)

– For open and transparent democracy (e.g. On-line consultation platform)

– The city map (with Interactive maps and searching of cemeteries)

• Public Internet Access Points (PIAPs)

E-Government

Page 19: Invitation to 45th TF-CSIRT Meeting in Poznań · Invitation to 45th TF-CSIRT Meeting in Pozna ... Pionier CERT Established 2001: POL34-CERT Renamed 2004/2005: Pionier CERT AS13293,

Virtual Laboratories

Page 20: Invitation to 45th TF-CSIRT Meeting in Poznań · Invitation to 45th TF-CSIRT Meeting in Pozna ... Pionier CERT Established 2001: POL34-CERT Renamed 2004/2005: Pionier CERT AS13293,

PIONIER Network Digital Libraries Federation

Digital libraries in the PIONIER Network

http://fbc.pionier.net.pl/ 88 data sources

over 300 institutions

1.6 million digital objects

0

250000

500000

750000

1000000

1250000

1500000

2007-04 2008-09 2010-01 2011-06 2012-10

Nu

mb

er

of

ob

ject

s

10

1

1 21

1 5

2

3

1

4

3

1 1 1

1

1

2

1

1

1

1 1

1

1

2

1

1

1

1

1

1

1

Page 21: Invitation to 45th TF-CSIRT Meeting in Poznań · Invitation to 45th TF-CSIRT Meeting in Pozna ... Pionier CERT Established 2001: POL34-CERT Renamed 2004/2005: Pionier CERT AS13293,

PIONIER Network Digital Libraries Federation

http://tpdl2015.info

19th International Conference on Theory and Practice of Digital Libraries 14-18.09.2015, Poznań, Poland

Page 22: Invitation to 45th TF-CSIRT Meeting in Poznań · Invitation to 45th TF-CSIRT Meeting in Pozna ... Pionier CERT Established 2001: POL34-CERT Renamed 2004/2005: Pionier CERT AS13293,

MOOC platform for K12

HTML5, CSS3 & less for cross-platform support

Tested in various browsers

Additional native apps to download the content off-line

Data export to different easy-to-use data formats

• PSNC now acts as the main technology partner in the “Digital School” programme, sponsored by the Ministry of National Education in Poland

• The “Digital School” programme focuses on three parts: e-teacher, e-school and e-books

• e-teacher part focuses on training and preparing staff to teach students how to live in the digital society

• e-school part focuses on delivering ICT equipment to selected schools

• The technology platform designed and deployed by PSNC will have to deliver 18 complete, free and officially approved e-books for K12 in Poland to 2 000 000 users by 2015

• The first beta release was available online September 2013 with example free math e-books

Page 23: Invitation to 45th TF-CSIRT Meeting in Poznań · Invitation to 45th TF-CSIRT Meeting in Pozna ... Pionier CERT Established 2001: POL34-CERT Renamed 2004/2005: Pionier CERT AS13293,

Pionier CERT

Established 2001: POL34-CERT Renamed 2004/2005: Pionier CERT

AS13293, AS8501 POL-34/155 National Network

AS8286 Academic Metropolitan Area Network, Szczecin

AS8267, AS8323 CYFRONET AGH, Academic Computer Centre Cracow

AS12324, AS12346 LUBMAN, Lublin

AS8256 Metropolitan Area Network LODMAN

AS8865 Metropolitan Area Network, Bialystok

AS12423 Nicholas Copernicus Univeristy, Torun

AS15798 OLMAN Metropolitan Area Network

AS15373 Politechnika Czestochowska

AS9112, AS8364 Poznan Supercomputing And Networking Center, POZMAN

AS5550, AS12831 TASK, PL-GDANSK

AS9103, AS13065 Technical University of Zielona Gora

AS8326, AS12618 University of Technology and Agriculture in Bydgoszcz

AS8970, AS15851 WASK - Wroclawska Akademicka Siec Komputerowa

http://cert.pionier.gov.pl

Constituency: PIONIER network

Page 24: Invitation to 45th TF-CSIRT Meeting in Poznań · Invitation to 45th TF-CSIRT Meeting in Pozna ... Pionier CERT Established 2001: POL34-CERT Renamed 2004/2005: Pionier CERT AS13293,

New PSNC Headquarter

Page 25: Invitation to 45th TF-CSIRT Meeting in Poznań · Invitation to 45th TF-CSIRT Meeting in Pozna ... Pionier CERT Established 2001: POL34-CERT Renamed 2004/2005: Pionier CERT AS13293,

New PSNC Headquarter

Page 26: Invitation to 45th TF-CSIRT Meeting in Poznań · Invitation to 45th TF-CSIRT Meeting in Pozna ... Pionier CERT Established 2001: POL34-CERT Renamed 2004/2005: Pionier CERT AS13293,

New PSNC Headquarter

Page 27: Invitation to 45th TF-CSIRT Meeting in Poznań · Invitation to 45th TF-CSIRT Meeting in Pozna ... Pionier CERT Established 2001: POL34-CERT Renamed 2004/2005: Pionier CERT AS13293,

New PSNC Headquarter

Page 28: Invitation to 45th TF-CSIRT Meeting in Poznań · Invitation to 45th TF-CSIRT Meeting in Pozna ... Pionier CERT Established 2001: POL34-CERT Renamed 2004/2005: Pionier CERT AS13293,

PSNC Security Team

• Since 1996, currently 9 persons

– Within the PSNC Supercomputing Department

• Main tasks

– Securing PSNC, PIONIER, POZMAN infrastructures

– Security tasks in R&D projects

– Preparing trainings and workshops

– Security research

– External services

• http://security.psnc.pl/en

Page 29: Invitation to 45th TF-CSIRT Meeting in Poznań · Invitation to 45th TF-CSIRT Meeting in Pozna ... Pionier CERT Established 2001: POL34-CERT Renamed 2004/2005: Pionier CERT AS13293,

Usual activities in R&D projects

• Design and implementation of security systems (e.g. IDS)

• Critical infrastructure protection

• Security reviews and audits

– Manual and automated source code analyses

– Penetration testing

– Clear box security tests

– Concept assessments

• Security trainings

– Secure programming principles

– Hardening of systems and services

• Security consultancy

Page 30: Invitation to 45th TF-CSIRT Meeting in Poznań · Invitation to 45th TF-CSIRT Meeting in Pozna ... Pionier CERT Established 2001: POL34-CERT Renamed 2004/2005: Pionier CERT AS13293,

Selected R&D projects

Page 31: Invitation to 45th TF-CSIRT Meeting in Poznań · Invitation to 45th TF-CSIRT Meeting in Pozna ... Pionier CERT Established 2001: POL34-CERT Renamed 2004/2005: Pionier CERT AS13293,

Security research in PSNC

• IDS/IPS, Complex Event Processing

• Wireless networks in Poznań

• eBanking security (SSL configuration)

• eCommerce sites (session configuration)

• Web servers (Apache / IIS)

• Using biological sequence alignment tools for visualization of network protocols

• Handling HTTPS errors in popular browsers

Page 32: Invitation to 45th TF-CSIRT Meeting in Poznań · Invitation to 45th TF-CSIRT Meeting in Pozna ... Pionier CERT Established 2001: POL34-CERT Renamed 2004/2005: Pionier CERT AS13293,

Other security activities in PSNC

• Knowledge transfer

– Conferences and trainings

– Articles and internal reports

• External services

– Penetration tests, complex security reviews

– for banks, SMEs, self-government, hospitals

– Securing UNFCCC COP 14 and COP 18 Conferences

Page 33: Invitation to 45th TF-CSIRT Meeting in Poznań · Invitation to 45th TF-CSIRT Meeting in Pozna ... Pionier CERT Established 2001: POL34-CERT Renamed 2004/2005: Pionier CERT AS13293,

Poznań

Page 34: Invitation to 45th TF-CSIRT Meeting in Poznań · Invitation to 45th TF-CSIRT Meeting in Pozna ... Pionier CERT Established 2001: POL34-CERT Renamed 2004/2005: Pionier CERT AS13293,

Poznań - localization

Flights • Oslo • Frankfurt • London • Dublin • Warsaw • Rome • Paris • Munich • Stockholm • Copenhagen

By train: 2h30’ from Warsaw; 2h30’ from Berlin

Page 35: Invitation to 45th TF-CSIRT Meeting in Poznań · Invitation to 45th TF-CSIRT Meeting in Pozna ... Pionier CERT Established 2001: POL34-CERT Renamed 2004/2005: Pionier CERT AS13293,

Poznań - curios

Page 36: Invitation to 45th TF-CSIRT Meeting in Poznań · Invitation to 45th TF-CSIRT Meeting in Pozna ... Pionier CERT Established 2001: POL34-CERT Renamed 2004/2005: Pionier CERT AS13293,

Poznań - curios

• About 550k population (5th in Poland) – 1M in agglomeration

• Capital City of Greater Poland (Wielkopolska)

• One of medieval Capital Cities of Poland

• 28 Universities

• Marian Rejewski, Henryk Zygalski, Jerzy Różycki

Page 37: Invitation to 45th TF-CSIRT Meeting in Poznań · Invitation to 45th TF-CSIRT Meeting in Pozna ... Pionier CERT Established 2001: POL34-CERT Renamed 2004/2005: Pionier CERT AS13293,

Question: What is ”Doing the Poznań” ?

Page 38: Invitation to 45th TF-CSIRT Meeting in Poznań · Invitation to 45th TF-CSIRT Meeting in Pozna ... Pionier CERT Established 2001: POL34-CERT Renamed 2004/2005: Pionier CERT AS13293,

See you at 45th TF-CSIRT Meeting in Poznań 21-22.05.2015