« Récap'Studio - Septembre/en » : différence entre les versions

Dernière version du 22 octobre 2024 à 16:02

Récapitulatif des travaux des CI & GT, ainsi que des projets en cours au Studio des Communs, septembre 2024

Catégorie : Blogpost Date de publication : septembre 2024

News from Communities of Interest and working groups

CI Cloud Detection

The working group will be testing its crypto-agility assessment matrix during the month of October.

If you are interested in the presentation of this tool, please contact the Studio

CI Crisis Management & Training

Working group plenary for members on Friday October 18: presentation of latest deliverables, roadmap 2024 - 2025, presentation of REMPAR25 exercise.

=== CI Drone===

*New contributors have joined the “State of the art of attacks/defenses on drones and robots” WG (ANSSI, Cabinet Louis Reynaud - CLR Labs); an inventory of the main risks incurred by a drone - whatever its typology - is underway. The aim of this inventory is to guide the drafting of the pentest protocol.

Participants in the “Authentication in swarms” WG will hear from French startup Dronisos, Europe's leading drone show operator, to understand how a swarm works from an operator's point of view.
The deliverable of the “Friend-Enemy Drone Spotting” WG is currently being drafted.

CI Cloud Security

*The “Governance of Public Cloud Configurations” WG intends to produce a White Paper on the continuous supervision of Cloud resource configuration, including mechanisms for operational maintenance of compliance/security. Work will resume after the summer.

The Data Security WG is working on identifying the main risks/threats to data stored in the Cloud, and recommending appropriate protection measures. Work will resume after the summer.

===CI Cloud detection===

The Cloud Risk Mapping and Cloud Detection Solutions WGs are continuing their respective work. The deliverable of the “Cloud analyst training” WG is currently being reviewed and edited.

=== CI AI Security===

*The 2 working groups resumed their sessions in September: “Security by design of AI systems” and “Attacks on AI”.  A plenary session of the IC took place at the beginning of September to share the initial work areas.

*The “Security by design for AI systems” working group is underway. The first deliverable of this WG will be to appropriate the first version of the ANSSI guide published in April on the security of systems based on generative AI, to identify sources of incomprehension for non-AI experts, difficulties to anticipate for implementation and possible requirements to complete.

Events

Collège Banques Assurances

CONNECT BASF

Open morning for the Banking / Insurance / Financial Services college: presentation of current working groups and deliverables. Workshops, round tables and meetings on the morning of November 8.

==Studio Projects==

TOP

The Osint Project, the OSINT platform dedicated to middle and high school students. Find all the challenges online the-osint-project.fr

=== Cyber4Tomorrow===

After several months' work, the Cyber4Tomorrow platform will be officially available at the launch of Cybermoi/s.

Co-sponsored by Campus Cyber and Numeum, Cyber4Tomorrow is an initiative that enables cybersecurity professionals⸱le⸱s to get involved in the service of a safer, more attractive and more sustainable digital world by leading and/or proposing actions to be carried out. Cyber4Tomorrow aims to:

reinforce citizens⸱nne⸱s confidence in digital technology by sharing good digital hygiene practices with as many people as possible (“CyberCitizenship” pillar),
develop the attractiveness of cyber professions in France (“CyberSpecialists” Pillar), and
disseminate environmentally-friendly cybersecurity practices (“CyberSustainability” pillar).

To join the project, send an email to contact@cyber4tomorrow.fr

To stay informed⸱e of C4T news, register on the platform by clicking here

CSR

Campus Cyber's “CSR” and “Diversity and Inclusion” policies are currently being reviewed.
The calculation of Campus Cyber's carbon footprint has begun. The first step is to collect the data required for a detailed audit (scope 1, scope 2, scope 3).

===INSIDER===

Find the replay of the September INsider presenting Cryptobox's features by clicking here
Find all our INsiders, now available in the “Resources” section of the wiki by clicking here

@@ Ligne 19 : / Ligne 19 : @@
   === CI Drone===
-<div lang="fr" dir="ltr" class="mw-content-ltr">
+ *New contributors have joined the “State of the art of attacks/defenses on drones and robots” WG (ANSSI, Cabinet Louis Reynaud - CLR Labs); an inventory of the main risks incurred by a drone - whatever its typology - is underway. The aim of this inventory is to guide the drafting of the pentest protocol.
-*De nouveaux contributeurs ont intégré lé GT « Etat de l’art des attaques / des défenses sur les drones et robots » (ANSSI, Cabinet Louis Reynaud - CLR Labs) ; un inventaire des principaux risques encourus un drone – quelle que soit sa typologie - est en cours. L’objectif de cet inventaire est de guider la rédaction du protocole de pentest.
+*Participants in the “Authentication in swarms” WG will hear from French startup Dronisos, Europe's leading drone show operator, to understand how a swarm works from an operator's point of view.
-*Les participants du GT « Authentification dans les essaims » assisteront à l’intervention de la startup française Dronisos, leader européen des spectacles de drones, afin de comprendre fonctionnement d’un essaim du point de vue d’un opérateur.
+*The deliverable of the “Friend-Enemy Drone Spotting” WG is currently being drafted.
-*Le livrable du GT « Repérage des drones ami-ennemi » est en cours de rédaction.
-</div>
-<div lang="fr" dir="ltr" class="mw-content-ltr">
+===CI Cloud Security===
-=== CI Sécurisation du Cloud===
-</div>
-<div lang="fr" dir="ltr" class="mw-content-ltr">
+ *The “Governance of Public Cloud Configurations” WG intends to produce a White Paper on the continuous supervision of Cloud resource configuration, including mechanisms for operational maintenance of compliance/security. Work will resume after the summer.
-*Le GT « Gouvernance des configurations du cloud public » souhaite produire un Livre Blanc relatif à la supervision continue de la configuration des ressources Cloud, incluant des mécanismes de maintien opérationnel de la conformité/sécurité. Les travaux reprennent après l’été.
+*The Data Security WG is working on identifying the main risks/threats to data stored in the Cloud, and recommending appropriate protection measures.  Work will resume after the summer.
-*Le GT « Sécurisation de la donnée » travaille sur l’identification des principaux risques / menaces pesant sur les données stockées dans le Cloud, pour recommander des mesures de protection adaptées.  Les travaux reprennent après l’été.
-</div>
-<div lang="fr" dir="ltr" class="mw-content-ltr">
+ ===CI Cloud detection===
-===CI Détection du Cloud===
+The Cloud Risk Mapping and Cloud Detection Solutions WGs are continuing their respective work.
-Les GT « Cartographie des risques dans le Cloud »  et « Panorama des solutions d’aide à la détection dans le Cloud » continuent leurs travaux respectifs.
+The deliverable of the “Cloud analyst training” WG is currently being reviewed and edited.
-Le livrable du GT « Formation des analystes Cloud » est en cours de relecture / mise en forme.
-</div>
-<div lang="fr" dir="ltr" class="mw-content-ltr">
+ === CI AI Security===
-=== CI Sécurité de l’IA===
-</div>
-<div lang="fr" dir="ltr" class="mw-content-ltr">
+ *The 2 working groups resumed their sessions in September: “Security by design of AI systems” and “Attacks on AI”.  A plenary session of the IC took place at the beginning of September to share the initial work areas.
-*Les 2 groupes de travail ont repris leurs sessions de travail en septembre : « Security by design des systèmes d’IA » et « Attaques sur l’IA ».  Une séance plénière de la CI a eu lieu début septembre pour partager les premiers axes de travail.
-</div>
-<div lang="fr" dir="ltr" class="mw-content-ltr">
+ *The “Security by design for AI systems” working group is underway. The first deliverable of this WG will be to appropriate the first version of the ANSSI guide published in April on the security of systems based on generative AI, to identify sources of incomprehension for non-AI experts, difficulties to anticipate for implementation and possible requirements to complete.
-*Le groupe de travail « Security by design pour les systèmes d’IA » est en cours. Le premier livrable de ce GT sera de s'approprier la première version du guide de l'ANSSI publié en avril sur la sécurité des systèmes à base d'IA générative, d'identifier les sources d'incompréhensions pour des experts non avertis IA, les difficultés à anticiper pour la mise en œuvre et les éventuelles exigences à compléter
-</div>
-<div lang="fr" dir="ltr" class="mw-content-ltr">
+ </div>
-</div>
+<div class=“recap-evt”>
-<div class="recap-evt">
+==Events==
-==Evénements==
 ===Collège Banques Assurances===
-</div>
-<div lang="fr" dir="ltr" class="mw-content-ltr">
+ CONNECT BASF
-CONNECT BASF
+Open morning for the Banking / Insurance / Financial Services college: presentation of current working groups and deliverables. Workshops, round tables and meetings on the morning of November 8.
-Matinée "portes ouvertes" du collège Banques / Assurances / Services financiers : présentation des groupes de travail en cours et des livrables. Ateliers, tables rondes et rencontres pour cette matinée du 8 novembre.
-</div>
-<div lang="fr" dir="ltr" class="mw-content-ltr">
 </div>
 <div class="recap-proj">
-</div>
-<div lang="fr" dir="ltr" class="mw-content-ltr">
+ ==Studio Projects==
-==Projets du Studio==
 ===TOP===
-The Osint Project, la plateforme d'OSINT dédiée aux élèves de collèges et lycées.
+The Osint Project, the OSINT platform dedicated to middle and high school students.
-Retrouvez tous les challenges en ligne  [https://the-osint-project.fr the-osint-project.fr]
+Find all the challenges online [https://the-osint-project.fr the-osint-project.fr]
-</div>
-<div lang="fr" dir="ltr" class="mw-content-ltr">
+ === Cyber4Tomorrow===
-=== Cyber4Tomorrow===
+After several months' work, the Cyber4Tomorrow platform will be officially available at the launch of Cybermoi/s.
-Après plusieurs mois de travail, la plateforme Cyber4Tomorrow sera officiellement disponible au lancement du Cybermoi/s.
-</div>
-<div lang="fr" dir="ltr" class="mw-content-ltr">
+ Co-sponsored by Campus Cyber and Numeum, Cyber4Tomorrow is an initiative that enables cybersecurity professionals⸱le⸱s to get involved in the service of a safer, more attractive and more sustainable digital world by leading and/or proposing actions to be carried out. Cyber4Tomorrow aims to:
-Co-portée par le Campus Cyber et Numeum, Cyber4Tomorrow est une initiative qui permet aux professionnel⸱le⸱s de la cybersécurité de s’investir au service d’un numérique plus sûr, plus attractif et plus durable en menant et/ou en proposant des actions à réaliser. Cyber4Tomorrow vise à :
+*reinforce citizens⸱nne⸱s confidence in digital technology by sharing good digital hygiene practices with as many people as possible (“CyberCitizenship” pillar),
-*renforcer la confiance des citoyen⸱nne⸱s dans le numérique en partageant au plus grand nombre les bonnes pratiques d'hygiène numérique (Pilier « CyberCitizenship »),
+*develop the attractiveness of cyber professions in France (“CyberSpecialists” Pillar), and
-*développer l’attractivité des métiers cyber en France (Pilier « CyberSpecialists »)  et
+*disseminate environmentally-friendly cybersecurity practices (“CyberSustainability” pillar).
-*diffuser les pratiques de cybersécurité vertueuses en matière de respect de l’environnement (Pilier « CyberSustainability »).
-</div>
-<div lang="fr" dir="ltr" class="mw-content-ltr">
+ To join the project, send an email to contact@cyber4tomorrow.fr
-Pour rejoindre le projet, envoyez un mail à contact@cyber4tomorrow.fr
+*To stay informed⸱e of C4T news, register on the platform [https://cyber4tomorrow.fr/ by clicking here]
-*Pour rester informé⸱e des actualités de C4T, enregistrez-vous sur la plateforme [https://cyber4tomorrow.fr/ en cliquant ici]
+===CSR===
-===RSE===
+*Campus Cyber's “CSR” and “Diversity and Inclusion” policies are currently being reviewed.
-*Les politiques  « RSE » et « Diversité et Inclusion »  du Campus Cyber sont en cours de relecture.
+*The calculation of Campus Cyber's carbon footprint has begun. The first step is to collect the data required for a detailed audit (scope 1, scope 2, scope 3).
-*Le calcul du bilan carbone du Campus Cyber a débuté. La première étape consiste à collecter les données nécessaires à la réalisation d’un audit précis (scope 1, scope 2, scope 3).
-</div>
-<div lang="fr" dir="ltr" class="mw-content-ltr">
+ ===INSIDER===
-===INSIDER===
+*Find the replay of the September INsider presenting Cryptobox's features [https://www.youtube.com/watch?v=OVBOBSy4zmg by clicking here]
-*Retrouvez le replay de l'INsider du mois de septembre qui présente les fonctionnalités de Cryptobox [https://www.youtube.com/watch?v=OVBOBSy4zmg en cliquant ici]
+*Find all our INsiders, now available in the “Resources” section of the wiki [https://wiki.campuscyber.fr/Ressources by clicking here]
-*Retrouvez tous nos INsiders, maintenant disponibles dans la Rubrique "Ressources" du wiki [https://wiki.campuscyber.fr/Ressources en cliquant ici]
-</div>
-<div lang="fr" dir="ltr" class="mw-content-ltr">
-</div>
 </div>

« Récap'Studio - Septembre/en » : différence entre les versions