Modern scientific instruments generate data at such high rates that online processing is needed for data reduction, feature detection, and experiment steering. These rates also demand memory-to-memory streaming from instrument to remote computer, because local computational capacity is limited and data transmissions that engage file system introduce unacceptable latencies. Such data streaming is challenging to realize in practice because of lack of direct external network connectivity for scientific instruments; and authentication/security requirements. We propose SciStream, a middlebox-based architecture with control protocols to enable secure data streaming from producer’s memory at one facility to consumer’s memory at another remote facility.

Network Orchestration is a defining factor in next generation networks, enabling operators to deliver more consistent and reliable services. ESnet has leveraged a combination of internally developed tools, open source software, and commercial software to Orchestrate and Automate network configuration deployment. This approach has enabled rapid deployment of new network services, as well as ensuring that configuration standards are well enforced when deploying network services. During this talk, we will provide a brief history of automation at ESnet, dive into what our goals were for orchestration and automation in the ESnet6 project, describe the technology and process that we used to meet those goals (and then provide live demonstrations of ESnet's orchestration tooling). Finally, we will discuss the hurdles encountered and lessons we learned along the way while developing this tooling.

A brief overview of the current Icelandic cybersecurity landscape. How the country has evolved towards offering high-speed internet connection to even most distant and rural areas and how that has made the population reliant on digital services and data drive life. How the NIS directive was put in place and put emphasis on securing the Icelandic cybersecurity domain, both within the public and private sectors, to improve the resilience and situational awareness. Iceland being relatively late to the game, with its small population, and how it managed to pass some challenges with the implementation of the directive.

TBA

What is the difference between implementing an information security management system for university communities or companies, the main challenges, and obstacles in these different cultures? Is there also a different cultures inside university.

In this talk, Johan Planmo will explain and give examples of how standards can be used to facilitate a better learning environment. Standards can automate the connection of new learning tools with the SIS, increase portability to new tools and support continuous archiving. Standards can also open up opportunities to use tools in new contexts.

Jörg, Niklas and Minette meet in a discussion around the future of learning environments in higher education and related challenges. In this NORDUnet might have an important role, facilitating a foundation for these eco-systems.

The presentation will discuss the finding of various NREN examples and feedback related to their national digital transformation strategies. It aims to highlight the key areas where our research and education community will focus on and identify potential new areas for development and collaboration. Some of these include data handling, trust&identity, student mobility. The talk will also present the Task Force on Education. TF-EDU aims to bring people together across education activities and services, to address common issues faced by (N)RENs and their communities. We share knowledge and best practices from everything from strategy to tools to support education at the local, national and international level. We will present the results from our annual survey and any trends after its third year in the field.

I shall present an automated what-if analysis tool AalWiNes for MPLS networks which allows us to verify both logical properties (e.g., related to the policy compliance) as well as quantitative properties (e.g., concerning the latency) under multiple link failures. Our tool relies on the theory of weighted pushdown automata, a quantitative extension of classic automata theory, and takes into account the actual dataplane configuration, rendering it especially useful for debugging. In particular, our tool collects the different router forwarding tables and then builds a pushdown system, on which quantitative reachability is performed based on an expressive query language. Our experiments show that our tool outperforms state-of-the-art approaches (which until now have been restricted to logical properties) by several orders of magnitude; furthermore, our quantitative extension only entails a moderate overhead in terms of runtime. The tool comes with a platform-independent user interface and is publicly available as open-source. Joint work with: P.G. Jensen, D. Kristiansen, S. Schmid, M.K. Schou, B.C. Schrenk, J. Vanerio and I. van Duijn.

This talk is a combination introduction, survey and advance marketing for Quantum Computing and Quantum Networking. This area is exciting and mind-bending but still in its infancy. There are many exponentials involved in both QC and QN, and thus either or both can explode into the mainstream unexpectedly, as progress is non-linear; however, the engineering still faces considerable challenges. There have been exciting advances recently The goal here is simply to bring awareness of the possibilities and the obstacles and to point to the additional sessions on related quantum topics.

Exascale computing is a measure of computer performance and refers to systems being able to perform at least an exaFLOP. In June 2022, the world's first public exascale computer, Frontier, became the world’s fastest supercomputer Exascale/pre-exascale computing should “not” be thought of just as a huge number of floating point units, so that HPC centers can compete on who has the largest supercomputer in “size”. If an exascale “sized” supercomputer is not able to run an exascale “application”, does this actually make it an exascale supercomputer? or it can be simply described as a set of smaller supercomputers located in one room? There are several technical challenges in the way to actually reach exascale computing. One is how to actually develop exascale applications i.e. with billion-way parallelism == 1 billion floating point units performing 1 billion calculations per second. Do such applications actually exist, and if not then what are the possibilities for existing large-scale applications being capable of reaching this in the future A second challenge is handling power consumption for exascale computing. A theoretical analysis by the Exascale Study Group showed that with the traditional technologies, a 1-exaflop system may consume more than 600 megawatts. A third challenge is the “memory wall” challenge. If exascale/pre-exascale systems are supposed to be the “fastest”, how can we manage the time and energy required to move data from memory into the compute units, and from the compute units out to storage, not to be larger than the time and energy required to perform a floating-point operation on that data. The presentation will address the above, in addition to other general and a few system-specific challenges and how they are currently handled in Frontier and EuroHPC petascale systems

The short answer is yes, it’s already been done, it’s only a matter of will-power. However, what is Exascale? This subject contain more than just the childish “my machine bigger than yours”. What do we want or expect from an Exascale system ? We can hope that these large systems representing a considerably number of million Euro can be used for valuable science. Which again open up the question what kind of science and what kind of scientific problems can such a system tackle ? Stepping back, what do we mean with Exascale ? 10e18 , 64 bit (commonly referred to as double precision) floating point number calculations per second. Note that nothing is so far is about processing of any data. You want to process data, real data and in large quantities ? That’s something totally differently, it involves different types of memory and storage. At this point we start approaching the real science regime as all scientific computations involve some data in some way. Which again open the question how do we measure performance ? Also known as benchmarking. There are several well known methods for assessing the performance of a so called supercomputer, many of the tests are in widespread use and some are used in the ranking of the 500 fastest supercomputers in the world. Using the tests employed to rank the top-500 systems we can start at the purely theoretical number which is the floating point number calculations per second, which is found by just multiply cores, clock frequency, vector width etc and published as Rpeak. The next number which is actually used to rank the systems is Rmax which is how fast the systems can solve a linear algebra problem to solve a dense system of linear equations. This is known as the HPL benchmark. While this benchmark do linear algebra, it has far more computation per amount of data the commonly the case in real world scientific application and has come under criticism. To meet this criticism a second benchmark has been introduced which is more in line with real scientific applications, namely HPCG. This which solves a system of Conjugate Gradients. HPCG is designed to exercise computational and data access patterns that more closely match a different and broad set of important applications. How does these benchmark perform on the different systems and how do they relate to Exascale? As the majority of the system on the top500 list are supercharged by accelerators which is in most cases Graphic Processing Units (GPUs) yielding very high HLP performance numbers they are not easy to exploit using mainstream legacy scientific applications. Systems like the Fugaku (2. on the HPL top500 list, 1. on the HPCG top500 list) is a pure CPU based system, demonstrating that while accelerators are powerful they are not universal compute elements. Not all scientific codes lend themselves easily to acceleration. Are the scientific applications actually experiencing Exascale ? Starting with HPCG and selected scientific applications. How far are common scientific applications from Exascale ? The last metric one might use to assess the fastest (maybe most useful) systems in the world is the Gordon Bell prize which is awarded annually to an outstanding achievement in high-performance computing. Tracking system by means of the Gordon Bell price is another mean of ranging systems. So we can reach Exascale, but does that give us the best system for science ?

In this talk we will look into a few already available options in the modern Linux environment which can be used to secure identity services. We will start with a very broken application (security wise) and see how to secure it with systems & SELinux/Apparmor.

To allow easy access to SSH based services in Denmark, DeiC has made a SSH Certificate Authority that issues short-lived SSH certificates based on a federated login. The system requires no specific client - or service side installed programs and makes it possible for the user to use all standard ssh services - as long at the certificate is valid. Depending on the configuration of the participating services the CA allows the user to use the same username/uid across all services. Optionally it can be combined with systemd-userdb services to allow for fully automated user management. The CA also issues host certificates so the users do not have to trust the servers on first use (TOFU).

InAcademia Service is… • a proxy leveraging the federated identity services provided by eduGAIN • a lightweight alternative to full federated identity access for merchants with minimal and pseudonymised attribute release for merchants to assist the preservation of user privacy. • utilised by commercial retail services, such as Spotify, Backmarket, Autodesk, YouTube and myUNiDAYS.com, and other services outside the normal scope of national federations Where commercial service providers in eduGAIN are free to request multiple attributes when using federated identity, InAcademia requests only the attributes necessary to confirm academic affiliation, and does not share the attribute values received from IdPs with its downstream services, and so it preserves user privacy. This talk will describe the InAcademia service and exemplify with the drive to start using InAcademia for students in Sweden.

The University of Bergen has initiated a three year project for securing research systems, where all research equipment with a network connection is to be catalogued, secured and migrated into central management to be run according to standard best practice for secure IT management and operation. The premise is that local management performed by scientific staff or local IT staff isn't sufficiently secure, even behind firewalls. The entire organization and network is being reviewed and processed to increase security at endpoints.

In 2018, a small group of higher education institutions approached ORION, the NREN partner in Ontario, Canada, to help them improve their cybersecurity. In collaboration with these eight institutions, we hired a “Shared-CISO” as a pilot program. Since that time, this program has grown to support 40 institutions in two provinces, which is now known as ON-CHEC, the Ontario Cybersecurity Higher Education Consortium. This lightning talk will summarize the exciting journey that we have taken, and some of the lessons learned.

The global semiconductor chip shortage has impacted many industries in many different ways, not least the supply of networking hardware where leadtimes have jumped from a reliable 8-12 weeks to as much as 60 weeks in some cases. This talk looks at the impact the crisis has had on the delivery of R&E networking in the UK, what that means for services provided to the community of Universities and Colleges, and what steps have been taken within Jisc to mitigate the delays.

The GÉANT Community Committee established the eHealth Task Force to gather efforts in addressing the challenges in eHealth support. The TF provided a gap analysis on community needs, training, and is working to identifywhich services can be offered to institutions. We’d like to introduce the TF to the Nordic countries, present our ideas for the future, in a context where a lot is currently going on at the EC level (regulations, calls) . How can we as a community respond to this? What role do we want to play, and how to benefit from the advanced experiences of the Nordic countries?

Building off the success of the Networks for European, American, and African Research (NEAAR) collaboration, the US National Science Foundation has recently provided funding for a follow-up project, NEA3R, that adds NORDUnet as a partner and increases network capacity and science engagement services for international research collaborations working in the Arctic. This talk will provide an overview of the NEA3R project, highlighting changes and improvements to NEAAR, and will detail ways NORDUnet members and end users can benefit from and become involved in the collaboration.

Performance Measurement Platform (PMP) is a service designed to troubleshoot network paths and is based on low-cost hardware nodes with pre-installed perfSONAR software and central components. It is deployed in GÉANT collaborating organisations in Europe and Africa. PMP provides immediate access to perfSONAR’s historical measurement data and to on-demand testing instances. Every node as well as central components are available with a few clicks or CLI commands to provide vital data when troubleshooting a network performance problem. In this presentation, we will highlight the key PMP service features to help network operators and engineers succeed in network performance troubleshooting.

Monitoring a network without knowing how the data flows is like reporting traffic conditions an an highway ignoring transit times and stops-and-go situations: just of little use if you want to predict how your journey will be. Transit time and stop-and-go translate into data packets latency and delivery time jitters on network and Timemap is the tool we developed to monitor them inside the GEANT backbone, a tool which can be / hopefully will be implemented also inside other national and international backbones. Services and Applications in strict need to know latency and jitter conditions to work correctly are out there and used daily, and some of them (like the very low latency high quality videoconferencing services in use in Performing Arts education and real time interactivity) need this monitoring to ensure a quick and reliable debugging when problems happen, too. We will show how we implemented the monitoring tool, directly talking to backbone routers to get the data, storing them and displaying and analyzing them; all using standard and open source well established components, with nearly zero "new developed software" to ensure an easy sustainability of the tool. Furthermore, since we started to collect historic data, we discovered interesting events which happen on the backbone, which were quite difficult to detect before, expanding our knowledge of the network itself. TimeMap is already taking data from the whole GEANT backbone since quite some time now, and as such also Anomaly Detection using machine learning techniques is now also working quite well. Besides the GEANT backbone, TimeMap can be used inside any other network backbone, national, regional, local. Adopting it will create a complet end to end monitoring system which can truly enable safe and reliable operations for any service which requires real time data transfer in a timely way.

Sustained ocean in situ observations are sorely lacking in the Arctic. This limits the possibility to advance the research of climate, weather, ice-ocean processes, and geophysical hazards. SMART (Scientific Monitoring And Reliable Telecommunications) Cables with integrated sensors are in progress in the Arctic e.g., Far North Fiber, Borealis. To facilitate the sustained observation of the full water column the cables will need to support branching points connecting advanced underwater installations that extend up into the water column with instrumentation. The cabled super-sites will be cornerstones in a future Arctic Ocean Observing System (AOOS). Such cabled (and uncabled) super-sites equipped with acoustic sources and receivers will enable basin scale tomography (for temperature) and form an underwater acoustic navigation system (a la GNSS) for floats, gliders, and powered autonomous undersea vehicles, the latter electric vehicles benefiting from cabled docking stations for power and communication.

Quantum communication and Quantum Key Distribution as one of examples and use cases for quantum communication received significant support in the form of National and EC programs. The technologies as part of larger quantum technologies initiative potentially offer new ways of communication and services especially for quantum computing infrastructure. NRENs as a community take part directly and indirectly in these initiatives and support the development through various testbeds and use cases, nationally and within the GÉANT 4-3 project.The talk will present the latest NRENs achievements in GN4-3 WP6 T1 activities and goals especially in view of different programs. Moreover the contribution will focus on other important aspects in the field - education and the approach of GÉANT eAcademy has chosen with a main goal - to spread awareness of this emerging technology.

Quantum networks promise to deliver new applications such as distributing cryptographic keys with provable security and synchronizing clocks with unprecedented accuracy. Quantum network simulations can help in understanding tradeoffs of alternative architectures, optimizing hardware, and developing a control plane. Simulator of QUantum Network Communication (SeQUeNCe) is a customizable discrete-event quantum network simulator that models quantum hardware and network protocols. SeQUeNCe uses a modularized design that separates functionality at different network layers into modules, which allows for testing of alternative protocols and hardware models and the study of their interactions. In this talk, I will provide a brief introduction to SeQUeNCe.

With the rising amount of severe security bugs discovered in mainstream IT services one wonders "when will IT services and software be more secure?" Nowadays we have Artificial Intelligence, can't we use this to improve our software? What is the reason the amount of severe security bugs found is rising annually? Did you know that software projects only grow in terms of source code? Probably you expect this ‘to be normal’ because ‘new features are being introduced’. What about ancient features, will they be removed?

eduMEET is an alternative to commercial and open VC services that places special emphasis on security, trust and cost-effectiveness, without compromising on high quality audio (Hi-Fi mode) and video (up to 4K). It is being developed by the REN community for the NREN community. The open-source web conferencing system is based on the webRTC API framework that allows video conferencing capabilities from within a web browser, eliminating the need to install specific video conferencing applications or clients. eduMEET offers a free licence and low-cost way for NRENs and institutions to deploy a video conferencing service tallored to their needs

geteduroam increases network security at the backend by removing the necessity to connect the internal user database of an eduroam organisation to the eduroam infrastructure. With this requirement gone, there is actually no need for an institution to maintain their own RADIUS server, which will lead to significant cost savings. geteduroam also provides user onboarding through Apps, and end users can get eduroam by logging in using their federated identity. In this case a user certificate (which is thereafter used for authentications to eduroam) is created on the device.

The Enabling Communities task of the GEANT 4-3 Trust and Identity Work Package, is on one hand been leading and participating in several activities on assurance like the REFEDS Assurance Suite. On the other hand, EnCo is active in the Federated Identity Management for Research (FIM4R) community. In 2021 FIM4R started work on requirements specific on assurance. Aims * Focus on work available on assurance in Federated Identity Management (like the REFEDS Assurance Framework) and raise awareness for the FIM4R requirements work on Assurance.

Bruno

The past two decades have witnessed increased attention and interest towards the Arctic, though for varying reasons. Opening up of sea lanes and estimates of the region's natural resource potential led to a discussion about a race to the Arctic. Growing awareness of climate change and its impact, visible for the inhabitants of the region in their everyday lives, has greatly contributed to global awareness. Most recently, the drastic geopolitical changes following the Russian aggression in Ukraine have not only tumulted the Arctic collaboration as we knew it, but have also greatly changed the Arctic playground. Arctic cooperation is currently characterized by the rupture of the global security landscape. The implications of these developments have rippled through every aspect of Arctic collaboration. The sanctions create tremendous change and room for many unintended consequences, also locally in the Arctic. The form of continued regional, environmental or business collaboration is uncertain. Simultaneously, the pan-Arctic region faces societal challenges including outmigration, calling for increased efforts to focus on building modern societies with opportunities for the younger generations. The global discussion about the Arctic is a constant balancing act between the will to preserve and the need to develop. Geopolitical tensions bring an added layer to this balancing act. How do we balance the contradicting needs and challenges as the Arctic manoeuvres from one global crisis to another, and as the ramifications of the current crisis are still partially to be unveiled? How do we ensure true local influence on decisions – whether related to business and technology or societal development?

Methods for time and frequency transmission over long distances based on fibre optic links have evolved rapidly in recent years, with excellent performance in frequency transmission and considerable potential in accurate time transmission. Fibre optic links not only offer extreme data transmission rates, but are also attractive for very high performance applications such as optical clock comparisons, fundamental research or relativistic geodesy, as well as for many industrial and societal applications, and offer an alternative to radio- and satellite-based methods. Based on the findings of a recent CLONETS-DS consortium workshop with potential stakeholders, we will describe our current understanding of the needs of science and society for accurate time and frequency reference delivery over fibre optic cables, the currently existing infrastructure and the progress made in different scenarios for the implementation of such a service. Acknowledgement The research leading to these results has received funding from the European Union’s Horizon 2020 research and innovation programme under Grant Agreement No. 951886 (CLONETS-DS).

The CLONETS-DS (clock networks design study)* consortium is in the closing stages of preparing a report which will identify Europe’s requirements for very accurate time and frequency reference delivery over fiber optic cables. Use cases include metrology applications such as optical clock comparisons, fundamental research or relativistic geodesy; traditional satellite based GPS time distribution is no-longer have the accuracy needed to be able to meet all the needs of these new users. The design study has described a set of options for realizing a pan-European fiber infrastructure that will be able to deliver time at an accuracy never before achieved. In 2019, GÉANT recognized that as we were about to rebuild the DWDM and dark fiber layers of our network, it would be a good opportunity to ensure that the network would support future time/frequency services as identified in the first CLONETS study. This requirement was recognized to as capability that could be a key differentiating factor between GÉANT and other network providers (commercial or etc). To achieve this objective GÉANT has 1. Become the project coordinator for CLONETS-DS, and 2. we have designed in the capability to carrying both traditional internet traffic and time/frequency into the DWDM layer of the new GÉANT network. In this presentation I will describe the engineering solution that GÉANT has developed over the past 2 years to meet the CLONETS objectives. I will compare this to other possible solutions and consider the cost/benefits of these options. * CLONETS-DS is a research and innovation action funded by the European Union to facilitate the vision of a sustainable pan-European fibre optic network for the dissemination of accurate time and frequency references by bringing together the expertise of national metrology institutes (NMIs), academic groups and research infrastructures (RIs), research and education networks at national and European level (National Research Network (NREN), GÉANT and innovative high-tech small and medium-sized enterprises (SMEs).

CSC – IT Center for Science Ltd has launched Funet Campus Network as a Service (Funet CNaaS) solution in Finland. Funet CNaaS design has been developed to speed up user driven changes to network and give users an agile service delivery by using automation tools. The talk provides practical examples of the reasons for using CNaaS and how the Funet CNaaS solution tackles automation challenges with Ansible-based configuration automation, which is used to provide configuration of typical network services delivered to campus.

After three years of operations, the Norwegian NREN Sikt currently has 10 operational CNaaS customers. The service has been continuously developed and improved. After countless hours of hard work (read: fun) we have gained quite a bit of experience. This talk will elaborate on where we are now and what is next on our TODO. What are our ambitions for the future? Can the service scale indefinitely?

The talk focuses on Campus Network as a Service, from the viewpoint of Swedish NREN SUNET: what is included in the SUNET CNaaS model, complexities and background and experiences so far. The talk also presents challenges, thoughts on service delivery and future plans on implementations. The talk provides practical examples of automation of the infrastructure and keeping things centralized in a distributed organization, components used, and why some parts are developed in-house and which can be reused by others. Finally, the talk covers how collaborative development with other NRENs is done.

SeamlessAccess is a cross-stakeholder initiative to improve access to online content and services in research & education. SeamlessAccess builds on the framework of federated access, making it easier for librarians, service providers, e-infrastructures, and end-users to benefit from federated authentication. This is done by initiating and coordinating Working Groups that tackle common challenges - such as WAYF entry disambiguation or contract language templates – and by developing and operating the SeamlessAccess service. This service consists of three elements: An easily recognizable smart button which Service Providers (SP)’s can inject on their sites, a central Identity Provider (IdP) discovery service, and a persistence function that remembers the user’s choice of IdP across different integrating SP’s. In this presentation we will review the SeamlessAccess service offering, present our development roadmap, and elaborate how SeamlessAccess provides value for end-users, SP’s and IdP’s, and federation operators.

The research & education community have historically focused on unicorn services. Not multi-billion krona/euro startups that promote the gig economy by exploitation of workers, customers identity attributes and preferences or both. Rather, unique services that support the research and education goals of specific communities. The investment in these tools was easily justified but the biggest barrier was accessing users. To unleash the stampede of staff, students and researchers from around the world interfederation was promoted and delivered by eduGAIN. The cost reduction of user management and validation allowed the unlocking of services to a wider audience. After a decade of interfederation what did we achieve? This presentation analyses identity federations and the intefederation reach of their services. Exploring institutional adoption and revealing mass market services, unique services and the gaps in reach and adoption.

Quantum Computing is advancing rapidly with IBM leading the field. IBM has made quantum computers available since 2016 and today anybody can get started with a free account on IBM Quantum Experience. Join Jan Lillelund for a 30 minute brief on the current status of the technology, what is in the pipeline for the next couple of years, some examples of where QC is being applied and see how easy it is to get started with the IBM Open Source Quantum Computing programming model.

In the first part of the presentation, I will summarize the goals and projects of the Quantum Internet Alliance (QIA), a consortium of academic and industry partners within the European Union's Quantum Flagship. In the second part, I will focus on our efforts at the University of Innsbruck within QIA to construct quantum networks based on trapped ions. We have recently established an elementary network between trapped-ion systems in two laboratories on the University of Innsbruck campus, linked by 510 m of optical fiber. Entanglement has been verified over the network, and we plan to scale up to longer distances via quantum frequency conversion.

Modern and future networks are becoming increasingly more complex. As a consequence, it is even more difficult and costly to operate such networks. To tackle this challenge, machine learning (ML) is a potential technique. In this talk, an introduction to ML fundamentals will be provided. Then, how machine learning may be applied to ease network operation and management and to make network resource utilisation more efficiently will be discussed. In the final part, challenges of applying ML to network operations will be highlighted, together with an outlook on its future development.

Microdep, the Micro Dependability measurements are exposing unneccessary long routing convergence times in our networks. New multi parameter analysis combined with route change detection makes it easier to understand where it happens and then why. Further developments like integration with Perfsonar are discussed.

With more the 5 years of running in production, the SURF orchestrator is branching out in functionality and domains it is connecting to. High time for an update about how orchestration is evolving at SURF and what the future holds. In 20 mins I will attempt to give an overview of how the transition from a “cli driven” network to a “service driven” network is changing what we can deliver to a customer and how we integrate with other services and technology domains within SURF.

Concerns for advanced cyberattacks has increased in the aftermath of the Russian invasion of Ukraine. Nordic NRENs has also been legally obliged to implement sanctions against Russia and Belorus. On a longer term, national and EU level initiatives such as NIS2 and CER will increase pressure on NREN’s to show compliance on ensured resilience. We will present a viewpoint to the current situation on cybersecurity governance in NREN context in Norway and in Finland and also discuss the topic on a wider, Nordic perspective.

A number of studies have shown an important lack of skilled employees in cybersecurity, and this skills gap is sometimes identified as one of the most important challenges to cybersecurity, and thus to the robustness of modern society (my emphasis). There is an urgent need for cybersecurity skills at all levels, from basic security awareness among employees who use computers in their everyday work, to the decision makers who decide what systems to develop or procure. Technical security courses are slowly entering the computer science curriculum, but most of the current IT workforce have not been exposed to relevant security topics as part of their training, so we cannot wait for the knowledge and skills that enter the workforce through recent graduates to permeate the workforce. This is why the Department of Applied Mathematics and Computer Science at the Technical University of Denmark (DTU Compute) has decided to offer a part time Master of Cybersecurity as part of the Continuing Education programs. The new master education is targeted at people who manage security, e.g. as a CIO, CISO or CTO, project managers responsible for security critical software projects or experienced IT professionals who wish to transition into cybersecurity. We will discuss the motivation and goals for the design of the Master of Cybersecurity program and present our experiences offering this kind of education.

NORDUnet NOC have been informing about incidents in the NORDUnet network and services via email lists over the years. A snapshot of the current status of the open tickets have also been presented on the nunoc.org webpage. During the start of the Covid-19 the demand for a more simplified status overview specially for the media services was urgently needed! As such the status.nordu.net was created. Today you can subscribe for status updates on a specific NORDUnet service. The status.nordu.net is automatically updated with real-time information from the surveillance tools, i.e. no delays of seeing the status of the Nordunet services. Now the time has come to also update the NORDUnet ticket system which is used to manage the NETWORK planned work and incidents. During the presentation you will be able to see how you as a recipient best can receive and utilize the specific information provided by the NORDUnet NOC. The new network ticketing tool will be introduced on the 1 of October 2022.

Funet has gradually started replacing ancient network monitoring tools with Grafana and InfluxDB based solutions. A lack of good modern weathermap alternatives led to "proof-of-concept in production" level mapping tool which visualise both packet and optical networks over geographical maps. The future and support of such in-house developed tools is uncertain and it's very difficult to find resources to develop tools further. Therefore a more common modern toolset which serves NREN backbone network requirements, alienwaves and spectrum with measurement data sharing between the NRENs is definitely needed.

The presentation will go through opportunities and challenges crossing the north pole trajectory connecting the Nordics with US and Asia the shortest possible route.

The goal of the EDSSI project is to create seamless student mobility with connected student e-services, with a primary focus on digitalising the Erasmus+ program. This talk will look at the different components needed for this to work and how they all fit together. For example how can we use services lite eIDAS, eduGAIN and MyAcademicID to facilitate the interaction between students and organisations within higher education in regards to student cards, and e-signatures on online learning agreements and student housing contracts.

Using Federated Identity Management (FIM), the R&E community has over the years built a secure and trusted infrastructure for authentication and authorization that spans the globe. Recently, a new paradigm has emerged in the identity ecosystem: Self-Sovereign Identity. Core premise of Self-Sovereign Identity, or SSI, is that the user is directly responsible for, and in control of their own personal data. To enable the flow of information, a user will first collect data from an authoritative source, e.g. an institution. This data is put under user control, in a so-called ‘wallet’. Next, when the user needs access to a service, the service may ask the user to provide proof of ownership of certain credentials, either to establish the user identity, or to determine proper authorization. A data registry, which may be implemented as a distributed ledger, is used by all parties involved to establish the trust in the transactions. SSI may provide our sector with interesting opportunities, especially in areas like life-long learning and researcher identity. It may also help improve engaging with other sectors, either to provide or consume credentials in a much easier fashion. Leverage SSI to lower the ‘cost’ of establishing trust, especially when engaging with the long tail may be yet another use case. SSI does however also come with various challenges, both technical as well as from an organisational and legal perspective. After briefly introducing the core concepts of SSI, this talk will present three SSI use cases as these were explored in the GÉANT Trust and Identity Incubator: eduID, Diplomas and micro-credentials and Researcher ID. The talk will discuss for each of these the opportunities, compare them to existing FIM solutions, discuss the business case, but also list the challenges that exist in making these scenarios become reality.

We talk about authentication in general, and Webauthn (FIDO) in particular. Will we actually be able to call passwords a thing of the past anytime soon?

The '1+ Million Genomes' (1+MG) establish in 2018 brings together 22 EU countries, the UK and Norway with a goal to have at least 1 million sequenced genomes accessible in the EU. Recently, a plan for a federated European genomics data infrastructure was written to deploy a sustainable and secure cross-border linkage of and access to a multitude of genomic and related phenotypic, clinical and other datasets across Europe. The overall architecture is divided into five connected functionalities: data discovery, data reception, storage & interfaces, data access management mechanisms, and processing & analysis. It has become clear that international research infrastructure for genomics data needs ways encode machine-readable data access permissions for users. A federated data regulatory process envisioned in the 1+MG initiative needs ways to authenticate and authorize data users relialby in managing access to human biomedical datasets. In this talk, I will introduce specifications that have been developed with the Global Alliance for Genomics and Health (GA4GH.org). Technologies encode data access permissions of users, processes that enable communication of data access permissions at international scale, and facilitation of data access and analysis across international platforms like research initiatives, infrastructures, and national institutes.

After 10 year of cloudification, where are we, and what looks to be important for the future. We are gearing up for the 3rd generation of pan-European cloud agreements, there's the drive for digital autonomy and data sovereignty, there's Schrems2 and the impact of that, there is Gaia-X, there is EOSC, data spaces are coming, and there's the simple down-to-earth reality at the institution. How to make sense of this all? This would be from the point of view that there's something around how we could and should approach fulfilling the infrastructure-cloud demand in the next decade and the consequences of those decisions.

UiT has practiced a cloud-first strategy for several years and is currently in the process of migrating large parts of its data to the cloud. This is a complex process which needs to take many aspects of data governance into account but will give UiT a much-improved resilience and protection against the increasing threat of cyberattacks from foreign state and criminal actors. UiT is taking a pragmatic approach to data migration using multiple technologies including OneDrive/Sharepoint, file and object storage and cloud-based backup services to find the best haven for the different data categories it needs to govern.

Distributed acoustic sensing (DAS) has received growing attention in the last decade. This technology ‘re-purposes’ a dark fibre optic cable into a dense receiver array that might stretch up to 150 km with a spatial sampling interval down to 1 meter. In the Center for Geophysical Forecasting, a new research centre for research-based innovation at NTNU, analysis of such DAS data has a central role in the ongoing research. Two long-term (40 days or more) acquisitions using a subsea and an onshore fibres have been carried out, and results from these will be presented here. The first acquisition was executed using a 120 km portion of a 250 km Arctic subsea fibre optic cable connecting Longyearbyen to Ny-Ålesund, Svalbard, in order to sense the different acoustic signals in the area. Various results of this ongoing work will be shown, including whale detection and localization, ship tracking, and storm and earthquake signatures. An onshore acquisition was carried out in a quick clay area north of Trondheim in Rissa. This work aims to investigate various techniques for efficient quick-clay monitoring.

co-authors: Steve Lentz and Brad Avenson Subsea fiber cables that include repeater-based sensors will revolutionize our ability to monitor for earthquakes, tsunami, global climate change, and the security of major telecommunications infrastructure. While the SMART concept has been discussed and evaluated for over 10 years, developing a SMART repeater requires substantial research and development investment to validate the technology. With support from the U.S. National Science Foundation’s Small Business Innovation Research (SBIR) program, Subsea Data Systems has developed a fully operational benchtop prototype SMART repeater sensor system. Our system includes best-in-class sensors validated by the scientific and monitoring communities, coupled with the data formatting and transmission frameworks already accepted by these communities and in extensive use worldwide. Here we present the status of our ongoing efforts to make SMART Cables a reality through focused engineering aimed at a fully validated SMART Cable system.

Sensing the earth using existing telecommunications cables is a relatively new area for national research and education networks to be involved in. Strides to understand the technologies have been made, with some Nordic NRENs leading the way. But the question still remains, how can this scale? To really derive scientific value and to push the boundaries of the technology that we have available to us, new approaches may need to be developed. This presentation will explore the reasons why we need large scale distributed sensing infrastructures and pose a model for how to achieve this with the infrastructure that is available.

Everyone agrees that it is imperative to create cybersecurity and privacy awareness in their organisation. But how do you actually get your employees or colleagues interested in the subject? In this session, Charlie van Genuchten (SURF) will discuss how she has used crisis exercises to get people excited about cybersecurity and privacy since 2016. Get the do's and don'ts of creating interactive exercises and hopefully leave this session inspired to get your colleagues in crisis mode once in a while.

Security teams have a long history of sharing data about threats. By structuring the data, we enable automated detection and response, and new types of high-level analysis. The talk will present the ongoing data sharing initiatives in NORDUNET, their current applications and what the future might bring.