Program Overview

Monday, September 28^th
Track 1: CSIRTs
Track 2: Web Defacement
Track 3: Forensics
Tuesday, September 29^th
Track 1: CSIRTs
Track 2: Web Defacement
Track 3: Forensics
Wednesday, September 30^th
FIRST & AfricaCERT Symposium

Monday, September 28^th

	Track 1: CSIRTs	Track 2: Web Defacement	Track 3: Forensics
08:00 – 09:00	Registration
09:00 – 11:00	Creating and Managing CSIRTs Mr. Wassie GOUSHE (CMU SEI CERT/CC), Ms. Tracy BILLS (CMU SEI CERT/CC), Mr. James C. LORD (CMU SEI CERT/CC), Prof. Nabil SAHLI (TunCERT, AfricaCERT)	Web Defacement Incident Handling Process Day 1 Mr. Koichiro 'Sparky' KOMIYAMA (JPCERT/CC)	Forensics Theory/Procedures and Acquisition Mr. Jaap VAN GINKEL (University of Amsterdam/SURFcert), Mr. Wim BIEMOLT (SURFnet)
11:00 – 11:30	Coffee Break
11:30 – 13:00	Creating and Managing CSIRTs (continued)	Web Defacement Incident Handling Process Day 1 (continued)	Forensics (continued)
13:00 – 14:00	Lunch
14:00 – 15:45	Creating and Managing CSIRTs (continued)	Web Defacement Incident Handling Process Day 1 (continued)	Forensics (continued)
15:45 – 16:15	Coffee Break
16:15 – 17:30	Creating and Managing CSIRTs (continued)	Web Defacement Incident Handling Process Day 1 (continued)	Forensics (continued)
17:30 – 18:30	Cocktail Reception

Tuesday, September 29^th

	Track 1: CSIRTs	Track 2: Web Defacement	Track 3: Forensics
08:00 – 09:00	Registration
09:00 – 11:00	CSIRT Capacity Building and Implementation in Africa Mr. Wassie GOUSHE (CMU SEI CERT/CC), Ms. Tracy BILLS (CMU SEI CERT/CC), Mr. James C. LORD (CMU SEI CERT/CC), Prof. Nabil SAHLI (TunCERT/AfricaCERT)	Web Defacement Incident Handling Process Day 2 Mr. Koichiro 'Sparky' KOMIYAMA (JPCERT/CC)	Network Forensics & Live/Memory Forensics Mr. Jaap VAN GINKEL (University of Amsterdam/SURFcert), Mr. Wim BIEMOLT (SURFnet)
11:00 – 11:30	Morning Coffee Break
11:30 – 13:00	CSIRT Capacity Building and Implementation in Africa (continued)	Web Defacement Incident Handling Process Day 2 (continued)	Forensics (continued)
13:00 – 14:00	Lunch Break
14:00 – 15:45	CSIRT Capacity Building and Implementation in Africa (continued)	Web Defacement Incident Handling Process Day 2 (continued)	Forensics (continued)
15:45 – 16:15	Afternoon Coffee Break
16:15 – 17:30	CSIRT Capacity Building and Implementation in Africa (continued)	Web Defacement Incident Handling Process Day 2 (continued)	Forensics (continued)

Wednesday, September 30^th

	FIRST & AfricaCERT Symposium
07:00 – 09:00	Registration
09:00 – 10:30	Opening Ceremony & Keynote Presentation
10:30 – 11:00	Morning Coffee Break
11:00 – 11:30	Cybersecurity On-going Activities in Africa
11:30 – 13:00	Challenges and Lessons Learned
13:00 – 14:00	Lunch Break
14:00 – 15:00	Resilient E-Development
15:00 – 16:00	Cybercrime, Critical Infrastructure Protection and Law Enforcement
16:00 – 16:30	Closing Remarks
16:30 – 17:00	Afternoon Coffee Break
18:30 – 21:00	Closing Dinner

Challenges and Lessons Learned
Moderator: Prof. Nabil Sahli, TunCERT, AfricaCERT
- Introduction of the CERT Organization, Highlighted Areas of Work, and Discussion of Critical Cyber Security Issues for National CSIRTS - James Lord, Tracy Bills, Wassie Goushe, CERT/CC
- Retour d’experience - Olivier Caleff, CERT-FR
- EgCERT Lessons Learned - Ahmed Abd Allah Abd El-latif Mashaly,
- CERT-GH, Challenges and Lessons - Eric Akumiah
- Challenges in Libya - Khaled Embarek
- Expérience de la cote d'ivoire en matère de cybersécurité: Jacques Beugre, CI-CERT
Open Mic: Question and Answers
September 30, 2015 11:30-13:00
Closing Remarks
- Open Mic
- FIRST.Org, Koichiro Komiyama
- AfricaCERT Council of Elders, Professor Nii Quaynor
September 30, 2015 16:00-16:30
Creating and Managing CSIRTs
Mr. Wassie GOUSHE (CMU SEI CERT/CC), Ms. Tracy BILLS (CMU SEI CERT/CC), Mr. James C. LORD (CMU SEI CERT/CC), Prof. Nabil SAHLI (TunCERT, AfricaCERT)
New Material will be targeted for the African environment, and discuss components of a cyber-strategy and where CSIRT fits in, discuss broader aspects of cyber capacity building, address policy issues and their importance, and specifically address National Team implementation.
September 28, 2015 09:00-11:00
CSIRT Capacity Building and Implementation in Africa
Mr. Wassie GOUSHE (CMU SEI CERT/CC), Ms. Tracy BILLS (CMU SEI CERT/CC), Mr. James C. LORD (CMU SEI CERT/CC), Prof. Nabil SAHLI (TunCERT/AfricaCERT)
Collaborative workshop on the topic of CSIRT capacity building and implementation in Africa. Initial focus areas will include: unique environmental challenges, resources, and solutions. The day will consist of informational presentations, panel discussions, breakout sessions, and a Q & A session.
September 29, 2015 09:00-11:00
Cybercrime, Critical Infrastructure Protection and Law Enforcement
Moderator: Colonel Gbevlo Lartey
- Cybercrime Investigation - Stephane Konan
- Critical Infrastructure Protection and Cyber Law Resilience in Ghana - Lawyer George Nelson
- The Role of Private Sector Organization in Fighting Cybercrime - Albert Antwi-Boasiako
- Governance Requirements for Cyber Security: The ISACA Perspective - C.K. Bruce
Open Mic: Question and Answers
September 30, 2015 15:00-16:00
Cybersecurity On-going Activities in Africa
Moderator: Professor Nii Quaynor
- FIRST Activities in Africa - Koichiro Komiyama
- ITU Activities in Africa - Serge Zongo
September 30, 2015 11:00-11:30
Network Forensics & Live/Memory Forensics
Mr. Jaap VAN GINKEL (University of Amsterdam/SURFcert), Mr. Wim BIEMOLT (SURFnet)
Covers how to collect evidence when network and systems are compromised. Data recovery from both disk and memory is also covered.
September 29, 2015 09:00-11:00
Opening Ceremony & Keynote Presentation
Emcee: Eric Akumiah, CERT-GH
- Welcome Remarks from AfricaCERT, Jean Robert Hountomey
- Welcome Remarks from FIRST.Org, Koichiro Komiyama
- Welcome Remarks from ITU, Serge Zongo
- Welcome Remarks from NCA, William Tevi
- Statement from the Chairman of AfricaCERT Council of Elders, Professor Nii Quaynor
- Keynote Address by the Minister of Communications of Ghana, Hon. Dr. E. Omane Boamah
September 30, 2015 09:00-10:30
Resilient E-Development
Moderator: Dr. Abdulai Mohammed-Sani
- Cyber GREEN - Toward Healthy Cyberspace - Koichiro Komiyama, JPCERT/CC
- Joined Forces to Maintain Cybersecurity in NL - Wim Biemolt, SURFnet
- Internet Resilience: the Role of DNSSEC Deployment - Pierre Dandjinou and Yaovi Atohoun
- Collective Responsibility for Security and Resilience of the Global Routing System - Michuki Mwangi, ISOC
- Large Scale Cyber Security Exercise - Jaap van Ginkel, University of Amsterdam/SURFcert
Open Mic: Question and Answers
September 30, 2015 14:00-15:00
Web Defacement Incident Handling Process Day 1
Mr. Koichiro 'Sparky' KOMIYAMA (JPCERT/CC)
Day 1 will cover the basics:
- Introduction and HTTP Protocol Basics
- Web Server/Web Application
- Web Server Log Analysis
- Web Server Log Analysis Tools
September 28, 2015 09:00-11:00
Web Defacement Incident Handling Process Day 2
Mr. Koichiro 'Sparky' KOMIYAMA (JPCERT/CC)
Day 2 will be focused on hands-on exercises:
- Incident Handling Exercise: Compromised Server
September 29, 2015 09:00-11:00

Program Overview

Monday, September 28^th

Tuesday, September 29^th

Wednesday, September 30^th

Challenges and Lessons Learned

Closing Remarks

Creating and Managing CSIRTs

CSIRT Capacity Building and Implementation in Africa

Cybercrime, Critical Infrastructure Protection and Law Enforcement

Cybersecurity On-going Activities in Africa

Network Forensics & Live/Memory Forensics

Opening Ceremony & Keynote Presentation

Resilient E-Development

Web Defacement Incident Handling Process Day 1

Web Defacement Incident Handling Process Day 2

Local Hosts:

Co-Host:

Supporting Sponsors:

Program Overview

Monday, September 28th

Tuesday, September 29th

Wednesday, September 30th

Challenges and Lessons Learned

Closing Remarks

Creating and Managing CSIRTs

CSIRT Capacity Building and Implementation in Africa

Cybercrime, Critical Infrastructure Protection and Law Enforcement

Cybersecurity On-going Activities in Africa

Network Forensics & Live/Memory Forensics

Opening Ceremony & Keynote Presentation

Resilient E-Development

Web Defacement Incident Handling Process Day 1

Web Defacement Incident Handling Process Day 2

Local Hosts:

Co-Host:

Wednesday Reception & Dinner Sponsor:

Internet Bandwidth Sponsor:

Media Sponsor:

Supporting Sponsors:

Monday, September 28^th

Tuesday, September 29^th

Wednesday, September 30^th