|
## Workshop ##
|
* [Detailed workshop agenda](agenda.html) (includes links to presentations and schedule)
* [Lab access](http://ws.nsrc.org) (workshop only)
* [Participants](participants.html)
* [Instructors](instructors.html)
* [Reference materials](references.html)
* [Sponsors](sponsors.html)
* Workshop survey
* Photos
* [NSRC training videos](https://learn.nsrc.org)
* [CNDO](https://learn.nsrc.org/cndo) : [BGP](https://learn.nsrc.org/bgp)
|
|
## Workshop description ##
This 3-day MasterClass emphasises skills needed to secure Internet infrastructure from real-world cybersecurity threats. The target audience includes network engineers from industry, Internet Service Providers, stewards of critical Internet infrastructure (e.g. ccTLDs) and operators of research & education networks (RENs) who seek to improve the security, resilience, and reliability of their infrastructure.
## Topics ##
The MasterClass includes presentations and hands-on lab work covering the following topics:
* Security Policies & Compliance
* Layer 1-2-3 best practices
* Physical Infrastructure Security
* Management networks, OOB, configuration best practices
* Switching Architecture best operational practices
* Device security
* Securing and operating routing protocols (IGP and BGP)
* BGP Best Practices
* uRPF, RTBH filtering, BGP Origin Validation & RPKI
* DNSSEC best practices, KINDNS
* Vulnerability management
* Threat detection and mitigation
* Incident response handling
The instructor team has considerable operational experience in these areas. The MasterClass will use a virtual training platform where numerous concepts can be installed, configured, used and reviewed hands-on to provide some practical experience with possible solutions you may be considering or already have.
The goal of this MasterClass is to provide knowledge to assist with practical operational security needs for the participant and their organisation, as well as giving instructors and participants opportunity to share their existing approaches. Knowledge shared among peers greatly benefits in-person, interactive courses like this one.
By the end of this MasterClass, participants will have a much better view on how to approach the many security challenges Internet service providers and operators face on today's Internet.
## Prerequisites ##
This MasterClass assumes robust familiarity with editing files, installing software, and other day-to-day systems administration tasks on Unix-like operating systems or Linux.
As well as being experienced systems administrators, participants must have operational knowledge and experience of critical networking components such as OSPF or ISIS, BGP and the Domain Name System (DNS).
Topics
**Please note: participants are required to bring laptops**
