2. CSUC-CSIRT: Security services for Catalan
R&E community
jordi.guijarro@csuc.cat
@jordiguijarro
@cloudadms
Poznan, 21/05/2015

4. Agenda
IntroductionIntroduction
CSUC-CSIRT Context
Our Services
Ecosystem of tools
In the near future
Q&A

5. New Catalan Universities services consortium (formerly known as CESCA)

6. OUR VISION

7. Focused to Research and Education agents

8. Focused to Research and Education agents

9. Regional R&E Networks

10. Our services

12. “CSUC” and Security
Serveis
In Operation from 2003
Services
• Equip de Resposta a Incidents de
l'Anella Científica (ERIAC)
•Proactive detection
•Incident Handling
•Network focused
Listening to the NET: SMARTxAC
ERIAC: Security Response Team
SMARTxAC

13. Security Services: CSUC-CSIRT
http://www.csuc.cat/en/communications/security/incident-response-team

14. Security incidents statistics
2012 2013 2014
Abusive content 40% 20% 33%
Availability 2% 5% 6%
Fraud 7% 14% 7%
Malware 19% 27% 24%
Information rec.. 4% 5% 4%
Data Security 5% 5% 2%
Intrusion 4% 2% 6%
Intrusion Attempt 16% 8% 8%
Other 3% 12% 10%
Total Crítical High Medium Low
2012 660 2% 11% 19% 68%
2013 410 3% 4% 13% 79%
2014 689 12% 2% 10% 76%
0
20
40
60
80
100
120
140
G F M A M J J A S O N D

15. ¿Inside our DNA?

16. NOW -> CERTSI
Collaboration

17. Collaboration

18. New challenges - “Hybrid Clouds”

20. Ecosystem of tools

21. HOMEMADE
FEEDS
HUB
Ecosystem of tools

22. Nfsen + Cymru “power” -> Flow Sonar

23. Logs correlation

24. External feeds placed together

25. External feeds placed together

26. SmartxAC Platform
SMARTxAC is the collaboration between UPC
BarcelonaTech (CCABA) and CSUC

27. Architecture

28. Apps detection

29. Apps Classification

30. Top N

31. Autozoom

32. Security anomalies detection

33. Flows search

34. Eyes for our constituency

35. HOMEMADE
FEEDS
HUB
Proactive monitoring workflow and tools

36. Close to University (be viral!)
Master in Security Technologies

37. Near Future
New Audit ServicesNew Audit Services
RT → RTIR
More focus to DNS
DDOS 'headache'
And continuously listening the
NET ;-)

38. Dzięki!Dzięki!
Thanks!Thanks!
Gracias!Gracias!
Gràcies!Gràcies!
jordi.guijarro@csuc.cat
CSUC-CSIRT (eriac@csuc.cat)
Q & A time
Note: ERI -> CSIRT in Catalan