« Récap'Studio - Juillet/en » : différence entre les versions

Dernière version du 31 octobre 2024 à 15:30

Récapitulatif des travaux des CI & GT, ainsi que des projets en cours au Studio des Communs, juillet 2024

Catégorie : Blogpost Date de publication : juillet 2024

News from the Communities of Interest and working groups

Cyber Crisis Management WG

The working group published three new deliverables this month:

Roles and functions in a crisis cell access the sheet
Preventing cyber risks in the supply chain access to the file
Cloud technology issues in a cyber crisis access the file

These documents complete a series of method and exercise sheets which you can find on the Deliverables page by clicking here.

4 new documents to be published in a few weeks.

CI Drone

Launched last month, the “State of the art of attacks/defenses on UAVs and robots” WG defines the work problem; participants wish to establish a state of the art of attacks, distinguishing particularities according to UAV typology. The final objective is to create a test plan to carry out pentests and propose countermeasures.
Participants in the “Authentication in swarms” working group would like to supplement the information provided by the Reperion start-up with information from another company that uses or manufactures drones. Contacts are currently being made.
The deliverable of the “Locating friend-or-foe drones” WG is currently being drafted.

CI Cloud Security

The “Governance of Public Cloud Configurations” WG wants to produce a White Paper on the continuous supervision of Cloud resource configuration, including mechanisms for operational maintenance of compliance/security. Work is in progress.
The “Data Security” WG is working on identifying the main risks/threats to data stored in the Cloud, in order to recommend appropriate protection measures. Work is in progress.

CI Cloud detection

The Cloud Risk Mapping and Cloud Detection Solutions WGs are continuing their respective work, in anticipation of the summer period.
The deliverable of the “Cloud analyst training” WG is currently being drafted.

CI Crypto-Assets

The Crypto-Active community is finalizing its audit of blockchain nodes. It is currently drafting the audit report. Depending on the sensitivity of the vulnerabilities, they will have to be reported to the Ethereum Foundation before the report is published.

CI Mobility

The Mobility community has decided to work with the SIA on the subject of maintaining the maturity level of cyber systems in mobility.

CI AI and Cyber

The 2 working groups held their first 2 working sessions in July: “Security by design of AI systems” and “Attacks on AI”. A plenary session of the IC is scheduled for September, to share the initial results of their work.

Workshops will resume in mid-September.

Events

Bank and Insurance College

The Banking, Insurance and Financial Services college will be offering its ‘CONNECT’ edition to share their productions with the Campus Cyber community. Workshops, presentations and round tables will alternate during this morning session scheduled for November.

=== Cyber4Tomorrow===

On 2 July, the Cyber Campus hosted the launch event for Cyber4Tomorrow (C4T). Supported by the Studio des Communs, Cyber4Tomorrow is an initiative co-sponsored with Numem to enable cybersecurity professionals to invest in a safer, more attractive and more responsible digital environment.

To stay informed of C4T news, register on the platform by clicking here

WIKI

Find all our INsiders, now available in the ‘Resources’ section of the wiki by clicking here

@@ Ligne 2 : / Ligne 2 : @@
 |ShortName=Récap'Studio - Juillet
 |ShortDescription FR=Récapitulatif des travaux des CI & GT, ainsi que des projets en cours au Studio des Communs, juillet 2024
+|ShortDescription EN=Summary of CI & WG work, as well as projects in progress at the Studio des Communs, July 2024
 |ImageStr=Juillet.png
 |Date=juillet 2024
@@ Ligne 9 : / Ligne 10 : @@
 === Cyber Crisis Management WG ===
-<div lang="fr" dir="ltr" class="mw-content-ltr">
+The working group published three new deliverables this month:
-Le groupe de travail a publié trois nouveaux livrables ce mois-ci :
+*Roles and functions in a crisis cell [https://wiki.campuscyber.fr/Fiche_Pratique_:_R%C3%B4les_et_fonctions_en_crise_d%27origine_cyber access the sheet]
-*Rôles et fonctions en cellule de crise [https://wiki.campuscyber.fr/Fiche_Pratique_:_R%C3%B4les_et_fonctions_en_crise_d%27origine_cyber accéder à la fiche]
+*Preventing cyber risks in the supply chain [https://wiki.campuscyber.fr/Fiche_pratique_:_Pr%C3%A9venir_les_risques_cyber_d%27une_supply_chain access to the file]
-*Prévenir les risques cyber d'une supply chain [https://wiki.campuscyber.fr/Fiche_pratique_:_Pr%C3%A9venir_les_risques_cyber_d%27une_supply_chain accéder à la fiche]
+*Cloud technology issues in a cyber crisis [https://wiki.campuscyber.fr/Fiche_Pratique_:_Enjeux_relatifs_aux_technologies_cloud_durant_les_crises_d%27origine_cyber access the file]
-*Enjeux relatifs aux technologies cloud lors d'une crise d'origine cyber [https://wiki.campuscyber.fr/Fiche_Pratique_:_Enjeux_relatifs_aux_technologies_cloud_durant_les_crises_d%27origine_cyber accéder à la fiche]
+These documents complete a series of method and exercise sheets which you can find on the Deliverables page [https://wiki.campuscyber.fr/Productions by clicking here].
-Ces documents complètent une série de fiches méthodes et exercices que vous pouvez retrouver dans la page Livrables [https://wiki.campuscyber.fr/Productions en cliquant ici].
-</div>
-<div lang="fr" dir="ltr" class="mw-content-ltr">
+new documents to be published in a few weeks.
-nouvelles fiches exercices seront publiées à la rentrée.
-</div>
-<div lang="fr" dir="ltr" class="mw-content-ltr">
 ===CI Drone ===
-*Lancé le mois dernier, le GT « Etat de l’art des attaques / des défenses sur les drones et robots » précise la problématique de travail ; les participants souhaitent établir un état de l’art des attaques, distinguer les particularités en fonction de la typologie des drones. L’objectif final est de créer un plan de tests pour effectuer des pentests et proposer des contre-mesures.
+*Launched last month, the “State of the art of attacks/defenses on UAVs and robots” WG defines the work problem; participants wish to establish a state of the art of attacks, distinguishing particularities according to UAV typology. The final objective is to create a test plan to carry out pentests and propose countermeasures.
-*Les participants du GT « Authentification dans les essaims » souhaitent compléter les informations transmises par la start-up Reperion avec l’intervention d’une autre entreprise utilisant ou fabriquant des drones. Des prises de contacts sont en cours.
+*Participants in the “Authentication in swarms” working group would like to supplement the information provided by the Reperion start-up with information from another company that uses or manufactures drones. Contacts are currently being made.
-*Le livrable du GT « Repérage des drones ami-ennemi » est en cours de rédaction.
+*The deliverable of the “Locating friend-or-foe drones” WG is currently being drafted.
-</div>
-<div lang="fr" dir="ltr" class="mw-content-ltr">
+===CI Cloud Security===
-===CI Sécurisation du Cloud===
-</div>
-<div lang="fr" dir="ltr" class="mw-content-ltr">
+*The “Governance of Public Cloud Configurations” WG wants to produce a White Paper on the continuous supervision of Cloud resource configuration, including mechanisms for operational maintenance of compliance/security. Work is in progress.
-*Le GT « Gouvernance des configurations du cloud public » souhaite produire un Livre Blanc relatif à la supervision continue de la configuration des ressources Cloud, incluant des mécanismes de maintien opérationnel de la conformité/sécurité. Les travaux sont en cours.
+*The “Data Security” WG is working on identifying the main risks/threats to data stored in the Cloud, in order to recommend appropriate protection measures.  Work is in progress.
-*Le GT « Sécurisation de la donnée » travaille sur l’identification des principaux risques / menaces pesant sur les données stockées dans le Cloud, pour recommander des mesures de protection adaptées.  Les travaux sont en cours.
-</div>
-<div lang="fr" dir="ltr" class="mw-content-ltr">
+===CI Cloud detection ===
-===CI Détection dans le Cloud ===
+*The Cloud Risk Mapping and Cloud Detection Solutions WGs are continuing their respective work, in anticipation of the summer period.
-*Les GT « Cartographie des risques dans le Cloud »  et « Panorama des solutions d’aide à la détection dans le Cloud » continuent leurs travaux respectifs, en anticipant la période estivale.
+*The deliverable of the “Cloud analyst training” WG is currently being drafted.
-*Le livrable du GT « Formation des analystes Cloud » est en cours de rédaction.
-</div>
-<div lang="fr" dir="ltr" class="mw-content-ltr">
+=== CI Crypto-Assets===
-=== CI Crypto-Actif===
+The Crypto-Active community is finalizing its audit of blockchain nodes. It is currently drafting the audit report.
-La communauté Crypto-actif finalise l'audit des noeuds blockchain. Elle est en cours de rédaction du rapport d'audit.
+Depending on the sensitivity of the vulnerabilities, they will have to be reported to the Ethereum Foundation before the report is published.
-En fonction de la sensibilité des vulnérabilités, elles devront être déclarées à la fondation Ethereum avant la publication du rapport.
-</div>
-<div lang="fr" dir="ltr" class="mw-content-ltr">
+=== CI Mobility===
-=== CI Mobilité===
-</div>
-<div lang="fr" dir="ltr" class="mw-content-ltr">
+The Mobility community has decided to work with the SIA on the subject of maintaining the maturity level of cyber systems in mobility.
-La communauté Mobilité a décidé de travailler avec le SIA et d'instruire le sujet du maintien en niveau de maturité des systèmes cyber dans la mobilité.
-</div>
-<div lang="fr" dir="ltr" class="mw-content-ltr">
+=== CI AI and Cyber===
-=== CI IA et Cyber===
-</div>
-<div lang="fr" dir="ltr" class="mw-content-ltr">
+The 2 working groups held their first 2 working sessions in July: “Security by design of AI systems” and “Attacks on AI”.  A plenary session of the IC is scheduled for September, to share the initial results of their work.
-Les 2 groupes de travail ont menés leurs 2 premières sessions de travail en juillet : « Security by design des systèmes d’IA » et « Attaques sur l’IA ».  Une séance plénière de la CI est prévue en septembre pour partager les premiers axes de travail.
-</div>
-<div lang="fr" dir="ltr" class="mw-content-ltr">
+ Workshops will resume in mid-September.
-Les ateliers reprendront mi septembre.
-</div>
-<div class="recap-evt">
-==Evénements==
-===Collège Banques Assurances===
 </div>
+<div class=‘recap-evt’>
+==Events==
+===Bank and Insurance College===
-<div lang="fr" dir="ltr" class="mw-content-ltr">
+The Banking, Insurance and Financial Services college will be offering its ‘CONNECT’ edition to share their productions with the Campus Cyber community.
-Le collège Banque Assurance et Services financiers proposera son édition "CONNECT" afin de partager leurs productions à la communauté Campus Cyber.
+Workshops, presentations and round tables will alternate during this morning session scheduled for November.
-Ateliers, présentations et tables rondes alterneront lors de cette matinée prévue en novembre.
-</div>
-<div lang="fr" dir="ltr" class="mw-content-ltr">
+ === Cyber4Tomorrow===
-=== Cyber4Tomorrow===
+On 2 July, the Cyber Campus hosted the launch event for Cyber4Tomorrow (C4T). Supported by the Studio des Communs, Cyber4Tomorrow is an initiative co-sponsored with Numem to enable cybersecurity professionals to invest in a safer, more attractive and more responsible digital environment.
-Le 2 juillet, le Campus Cyber a accueilli l’évènement de lancement de Cyber4Tomorrow (C4T). Porté par le Studio des Communs, Cyber4Tomorrow est une initiative co-portée avec Numem pour permettre aux professionnels de la cybersécurité de s’investir au service d’un numérique plus sûr, plus attractif et plus responsable.
-</div>
-<div lang="fr" dir="ltr" class="mw-content-ltr">
+To stay informed of C4T news, register on the platform [https://cyber4tomorrow.fr/ by clicking here]
-Pour rester informé⸱e des actualités de C4T, enregistrez-vous sur la plateforme [https://cyber4tomorrow.fr/ en cliquant ici]
-</div>
-<div lang="fr" dir="ltr" class="mw-content-ltr">
 </div>
 <div class="recap-proj">
-</div>
-<div lang="fr" dir="ltr" class="mw-content-ltr">
 ===WIKI===
-Retrouvez tous nos INsiders, maintenant disponibles dans la Rubrique "Ressources" du wiki [https://wiki.campuscyber.fr/Ressources en cliquant ici]
+Find all our INsiders, now available in the ‘Resources’ section of the wiki [https://wiki.campuscyber.fr/Ressources by clicking here]
-</div>
 </div>

« Récap'Studio - Juillet/en » : différence entre les versions