2nd ETSI Security Workshop: Future Security

Following the success of the ETSI Security Workshop 2006, the 2nd ETSI workshop attracted over 100 participants and met its goal of making a broad assessment of the current situation in security, providing collaboration and coordination opportunities, as well as direction for future work.

Presentations were given by experts representing organizations such as ETSI, CEN,
CENELEC, The European Commission, ITU-T, ENISA, ISO/IEC, GSMA, KPN,
Telefonica, EADS.

Key issues identified and topics discussed include:

• Product proofing
• Regulation modelling
• Smart cards
• Public warning systems
• Retained Data
• DRM
• Healthcare
• Identity Management.

There was enthusiasm from the delegates to participate in the 3rd ETSI Security
Workshop, planned for 15-16 January 2008.

ETSI Future Security Workshop 2007 Presentations

Opening speeches 

• Welcoming speech, Jorgen Friis, ETSI Deputy Director General
• ETSI Security Activities Overview, Charles Brookson - ETSI OCG-Security Chairman, DTI
• ENISA Activities in Security, Elisabetta Carrara - ENISA Security Expert.

Session 1: ETSI Security I - Public Safety and Security

• EMTEL, Raymond Forbes - ETSI EMTEL Chairman, Ericsson
• Security modules for Professional Mobile Radio, Frederic Rousseau, EADS Secure Networks
• 3GPP^TM in Public Safety and Security, Joerg Swetina, 3GPP^TM TSG SA1 Vice-Chairman
• TETRA Security, Paul Leighton, Sepura.

Session 2: ETSI Security II - Regulation and security

• Lawful Interception, Peter van der Arend - ETSI LI Chairman, KPN
• Regulatory Framework for Communications Security and Privacy in Greece, Georgia Bafoutsou, Nicolaos Antoniadis - ADAE (Hellenic Authority for the Assurance of Communications Security and Privacy)
• Security requirements capture from the EU regulatory framework, Scott Cadzow, C3L.

Session 3: ETSI Security III - Upcoming challenges

• Proofing Products against Crime, Jen Mailley, Shaun Whitehead - Loughborough University
• Electronic Signatures, Riccardo Genghini - ETSI ESI Chairman, Studio Notarile Genghini
• Voice Printing and Reachability Code (VPARC) Mechanism for SPIT, Ranjith Mukundan, Vijay Radhakrishnan, WIPRO Technologies India.

Session 4: CEN/CENELEC Security

• Keynote speech: EC Communication COM(2006)251 on a Strategy for a Secure Information Society, Gérard GALLER - Policy Officer, European Commission DG Information Society Unit A3: Internet; Network & Information Security
• Towards the establishment of an international network and trust-enhancing mechanism under the heading of the 'Global Trust Center' (GTC), Thomas Andersson - President of Jönköping University and chairman of the International Organization for Knowledge Economy and Enterprise Development (IKED)
• CEN's activities towards a Citizen Electronic Card Technical Specification, Lorenzo Gaston - Gemalto
• Alarms Systems: Now and the Future, Carlo Loi - CENELEC TC79 Alarm Systems Chairman & Sharon Cumberbatch - CENELEC TC79 Alarm Systems Secretary.

Session 5: ETSI Security IV: Fixed/Mobile Convergence and Security

• 3GPP^TM Security, Valtteri Niemi - 3GPP^TM SA3 Chairman, Nokia
• GAA/GBA: a new architecture for single sign-on, Luis Angel Galindo - Telefonica Móviles Spain
• TISPAN Security, Judith E. Y. Rossebo¸ - ETSI TISPAN WG7 Chairman, Telenor R&D
• Smart Cards, Klaus Vedder - ETSI SCP Chairman, Giesecke & Devrient GmbH
• GSM Association, James Moran - GSMA Fraud and Security Director.

Session 6: ISO/IEC and ITU-T Security

• ISO/IEC JTC1 SC27, Dr. Marijke De Soete - ISO/IEC JTC1 SC27 Vice-Chairman, NXP Semiconductors
• Hierarchical Security Management, Johan Bakker, KPN Information Security Governance Principal Policy Advisor
• Overview of ITU-T Security Activities, Mike Harrop, ITU-T Rapporteur SG17 Q4, Communications Security Project.

Session 7: Round Table Discussion and Conclusions

Output Report

• TS 102 165-1 eTVRA (Threats Vulnerabilities and Risks Analysis) and its application in ETSI standards, Scott Cadzow, C3L
• Smart Card Security in fixed-mobile-converged Networks, Stephan Spitz, Project Manager New Technologies, Division Telecommunication, Giesecke & Devrient GmBH
• ETSI (SAGE) Security Algorithms Group of Experts, Steve Babbage, ETSI SAGE.