Earlier this year the ETIS CERT-SOC group identified a need for a Router Forensics & Network Devices Reverse Engineering training which was not readily available on the market. As a result ETIS organised a customised, three day training in co-operation with GroundWorks and Cubica Labs whom provided the training expertise. KPN kindly offered its premises in Amsterdam to conduct the training which took place during the end of June. This unique knowledge-sharing event was attended by six ETIS Member Telcos and one partner organisation.
The purpose and key outcome of this training is best described by one of the participants. “ETIS consists of the largest telecommunications operators in Europe. All of our data is transferred over infrastructures that depend on network devices from different vendors. There is not much knowledge available about performing forensic investigations on these kind of devices. This means that if such a device gets hacked, it would present a real challenge to find out what really happened and how to react properly. This is why the ETIS CERT/SOC working group decided to organize this course independent of any vendor. My idea behind this course was to kick-start the knowledge level of router forensics within the telco community. My hope is that we formed a solid basis to build upon and help this branch of the forensic science grow by contributing knowledge we further develop within our own companies.”
The next CERT-SOC Telco Network meeting will be hosted by Proximus in Brussels on 8-9 October. For more information on how to join the ETIS Working Groups, please contact Fred Werner at firstname.lastname@example.org .