The eduGAIN CSIRT will meet in Hamburg from the 17th to the 18th of September 2025 to discuss current issues related to the eduGAIN security and plan the evolution of the security function for the eduGAIN service in the course of the GEANT GN5-2 project.

Dates

September 17th and 18th 2025.

Location

DFN-CERT Services GmbH Offices
Nagelsweg 41

20097 Hamburg

Inside the HUK building, go to 2nd floor and ring the bell. Meeting will be held in room 3.01 (3rd floor), You will be escorted.

Transport

Public transport

  • from airport to central station
    • from customs head left for the train station (under ground). Look for a white "S" on a green background to guide You.
    • take the next S train, there should be only one option. This is the S1 heading to Blankenese or Wedel.
    • change at Hauptbahnhof (Central Station).
    • Arriving from airport puts You at track 1, which is under ground and outside the main building.
  • from central station to Hammerbrook
    • take the next S3 or S5 from track 4 (direction Hamburg-Harburg, Neugraben, Buxtehude or Stade).
    • leave at the next stop, which should be Hammerbrook.
  • from Hammerbrook to the office

Premium Ride Share from the airport (App needed)

Other options

Accommodation

Dinner

Contacts

Martin Waleczek - waleczek@dfn-cert.de - +4940808077555 (front desk)

Attendees

Tobias Dussa (DFN-CERT)

Sven Gabriel (NIKHEF)

Daniel Kouril (CESNET)

Sascha Kriebitzsch (DFN-CERT)

Maria Edbloum Tauson (SUNET)

Davide Vaghetti (GARR)

Martin Waleczek (DFN-CERT)

Agenda (draft)

September 17th
WhenWhatWho (convener)
09:00-09:15Arrival, Registration
09:15-10:45

Future plans for the eduGAIN Participants' Security requirements: Security Contact, Incident Response Process, etc. 

Presentation: TNC25 Town Hall.pptx

Davide Vaghetti
10:45-11:00

Coffee Break


11:00-12:30

Communication Challenge: Current status and updates

Presentation: CommsChallenge-TDussa-2025-09-17.html

Tobias Dussa
12:30-13:30Lunch
13:30-15:00

eduGAIN Table Top Exercise: Running

Presentation: 

Sven Gabriel, Daniel Kouril
15:00-15:15Coffee Break
15:15-17:30

eduGAIN Table Top Exercise: Updates and change proposals


All
September 18th
WhenWhatWho
09:00-10:00

Applying the concepts of IT Security Risk Management

Presentation: main.tcsc2025_risk_management.pdf

Sven Gabriel
10:00-10:15Coffee Break
10:15-11:45

Key signing party and AOB

eduGAIN OpenID Federation Pilot - Security considerations

Presentation: 

Davide Vaghetti
11:45-12:00Closure

Expected outcomes

  • Proposals for the evolution of the security requirements of eduGAIN Participants (to be submitted to the eduGAIN Steering Committe for consideration).
  • Update plan for the eduGAIN Communication Challenge.
  • Update plan of the eduGAIN Table Top Exercise
  • Security Considerations for the eduGAIN OpenID Federation Pilot
  • No labels