Skip to content

Commit ec877f2

Browse files
ruslanbaidanruslanbaidan
committed
Added the new training files.
Signed-off-by: Ruslan Baidan <[email protected]>
1 parent 0d5a30d commit ec877f2

File tree

9 files changed

+520
-0
lines changed

9 files changed

+520
-0
lines changed

‎20231206/1-introduction/introduction.tex

Lines changed: 108 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,108 @@
1+
%
2+
% SECTION: Luxembourg House of Cybersecurity
3+
%
4+
\section*{Who we are - Our history}
5+
\begin{frame}
6+
% \frametitle{Luxembourg House of Cybersecurity / Our history}
7+
\begin{center}
8+
\begin{itemize}
9+
\item 2003: Cyberworld Awareness and Security Enhancement Services (\textbf{CASES});
10+
\item 2007: Computer Incident Response Center Luxembourg (\textbf{CIRCL});
11+
\item 2010: SECURITYMADEIN.LU is a \textit{GIE} (Groupement d’Intérêt Économique). CIRCL and CASES are department of SECURITYMADEIN.LU;
12+
\item 2017: Cyber security Competence Center (\textbf{C3}), a new department of SECURITYMADEIN.LU;
13+
\item On 17th Oct. 2022: SECURITYMADEIN.LU transformed into the Luxembourg House of Cybersecurity (\textbf{LHC})\\
14+
CASES and C3 are now the National Cybersecurity Competence Centre of Luxembourg (\textbf{NC3})
15+
\end{itemize}
16+
\end{center}
17+
CASES was an initiative of the Ministry of Economy after the worm
18+
\textit{I love you} decimated more than 3 millions computers in less than a week.
19+
\end{frame}
20+
21+
% \begin{frame}
22+
% \frametitle{CASES}
23+
% \framesubtitle{}
24+
% \begin{block}{Mission}
25+
% Foster cyber security by supporting Luxembourg administrations and SMEs.
26+
% \end{block}
27+
%
28+
% \begin{block}{Services}
29+
% \begin{center}
30+
% \begin{itemize}
31+
% \item \textbf{Awareness}: publications of articles and videos;
32+
% \item \textbf{Trainings}:
33+
% introduction to cyber security for different audiences;
34+
% \item \textbf{Software}:
35+
% MONARC, MOSP, Fit4Cybersecurity, etc.
36+
% \end{itemize}
37+
% \end{center}
38+
% \end{block}
39+
%
40+
% \begin{block}{Cooperations}
41+
% ANSSI-LU,
42+
% Centre for Cyber Security Belgium, KonzeptAcht GmbH, ILR, GRC-Luxembourg and others.
43+
% \end{block}
44+
% \end{frame}
45+
46+
% --------- Summary ---------
47+
\setcounter{tocdepth}{1}
48+
\begin{frame}
49+
\frametitle{Content at glance}
50+
\tableofcontents
51+
\end{frame}
52+
\setcounter{tocdepth}{4}
53+
% ----------------------------
54+
55+
%
56+
% SECTION: What is MONARC?
57+
%
58+
\section{What is MONARC?}
59+
\begin{frame}
60+
\frametitle{Summary}
61+
\tableofcontents[currentsection, hideothersubsections]
62+
\end{frame}
63+
\subsection{An open source software}
64+
\begin{frame}
65+
\frametitle{An open source software}
66+
\framesubtitle{}
67+
MONARC is the tool you need for an optimised, precise and repeatable risk assessment.
68+
69+
\bigskip
70+
\begin{itemize}
71+
\item Web application (SaaS, self-hosted, virtual machine, etc.);
72+
\item source code\footnote{\url{https://github.com/monarc-project}}:
73+
\texttt{GNU Affero General Public License version 3};
74+
\item data: \texttt{CC0 1.0 Universal - Public Domain Dedication}.
75+
\end{itemize}
76+
77+
\bigskip
78+
MONARC is easy to use.
79+
80+
Used and recognized by experts from different fields (not only information security).
81+
82+
\bigskip
83+
For many users, it started with a spreadsheet!
84+
\end{frame}
85+
86+
\subsection{A community}
87+
\begin{frame}
88+
\frametitle{A community}
89+
\framesubtitle{}
90+
\begin{itemize}
91+
\item more than 280 organizations:\\ \url{https://my.monarc.lu};
92+
\item 17 organizations sharing MONARC objects (threats, assets, recommendations, etc.):\\
93+
\url{https://objects.monarc.lu};
94+
\item a global dashboard with trends about threats and vulnerabilitties:\\
95+
\url{https://dashboard.monarc.lu};
96+
\item discussions on GitHub:\\
97+
\url{https://github.com/monarc-project/MonarcAppFO/discussions}.
98+
\end{itemize}
99+
\end{frame}
100+
101+
\subsection{A method}
102+
\begin{frame}
103+
\frametitle{A method}
104+
\framesubtitle{Based on \texttt{ISO/IEC 27005:2011}, but optimized}
105+
\begin{center}
106+
\includegraphics[scale=0.6]{../common_pictures/iso27005-2011.png}
107+
\end{center}
108+
\end{frame}

‎20231206/2-method/method.tex

Lines changed: 144 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,144 @@
1+
2+
%
3+
% SECTION: The method
4+
%
5+
\section{The method}
6+
\begin{frame}
7+
\frametitle{Summary}
8+
\tableofcontents[currentsection, hideothersubsections]
9+
\end{frame}
10+
11+
12+
\subsection{Management of risk}
13+
\begin{frame}
14+
\frametitle{A Structured, Iterative and Qualitative method}
15+
\framesubtitle{}
16+
\begin{columns}[t]
17+
\begin{column}{5.5cm}
18+
\begin{figure}
19+
\includegraphics[width=5.5cm]{../common_pictures/MONARC-method-1.png}
20+
\end{figure}
21+
\end{column}
22+
\begin{column}{6.5cm}
23+
\begin{itemize}
24+
\item Structured: 1, 2, ..., n.
25+
\item Iterative: \textbf{Plan}, \textbf{Do}, \textbf{Check}, \textbf{Act}
26+
\item Qualitative: \textbf{Values} / \textbf{Consequence}
27+
\begin{itemize}
28+
\item Impact/Consequence, Threat, Vulnerability;
29+
\item \textbf{r}eputation, image;
30+
\item \textbf{o}peration;
31+
\item \textbf{l}egal;
32+
\item \textbf{f}inancial;
33+
\item \textbf{p}erson (to the).
34+
\end{itemize}
35+
Possibility to define custom scales for operational risks.
36+
\end{itemize}
37+
\end{column}
38+
\end{columns}
39+
\end{frame}
40+
41+
\begin{frame}
42+
\frametitle{Automated and simplified management}
43+
\framesubtitle{Method based on \texttt{ISO/IEC 27005}}
44+
\begin{center}
45+
\includegraphics[scale=0.45]{../common_pictures/MONARC-method-2-2.png}
46+
\end{center}
47+
\end{frame}
48+
49+
\begin{frame}
50+
\frametitle{Automated and simplified management}
51+
\framesubtitle{Sub-stages provided by the method are also in line with \texttt{ISO/IEC 27005}}
52+
\begin{center}
53+
\includegraphics[scale=0.4]{../common_pictures/MONARC-method-2-1.png}
54+
\end{center}
55+
\end{frame}
56+
57+
\begin{frame}
58+
\begin{block}{Information risks}
59+
$$R = \textbf{I}mpact \times \textbf{T}hreat \times \textbf{V}ulnerability$$
60+
\begin{itemize}
61+
\item impact on \textbf{C}onfidentiality \textbf{I}ntegrity \textbf{A}vailability;
62+
\item on secondary assets.
63+
\end{itemize}
64+
\end{block}
65+
66+
\begin{block}{Operational risks}
67+
$$R = \textbf{I}mpact \times \textbf{P}robability$$
68+
\begin{itemize}
69+
\item impact by default on ROLFP (possibility to define custom scales);
70+
\item on primary assets.
71+
\end{itemize}
72+
\end{block}
73+
\end{frame}
74+
75+
76+
77+
\subsection{An optimized method}
78+
\begin{frame}
79+
\frametitle{Optimizations}
80+
\framesubtitle{}
81+
MONARC is an optimized method:
82+
\begin{itemize}
83+
\item inheritance on objects;
84+
\item scope of objects;
85+
\item inheritance on impacts;
86+
\item deliverables;
87+
\item multiple dashboards and reporting possibilities.
88+
\end{itemize}
89+
\end{frame}
90+
91+
\subsubsection{Inheritance on objects}
92+
\begin{frame}
93+
\frametitle{Inheritance on objects}
94+
\framesubtitle{Modelling}
95+
\begin{center}
96+
\includegraphics[scale=0.45]{../common_pictures/MONARC-method-modelling.png}
97+
\end{center}
98+
\end{frame}
99+
100+
\begin{frame}
101+
\frametitle{Inheritance}
102+
\framesubtitle{Formalisation of the modelling}
103+
\begin{center}
104+
\includegraphics[scale=0.5]{../common_pictures/MONARC-modelling-formalisation.png}
105+
\end{center}
106+
\end{frame}
107+
108+
\begin{frame}
109+
\frametitle{Inheritance}
110+
\framesubtitle{Formalisation of an asset}
111+
Example with \texttt{OV\_BATI}
112+
\begin{center}
113+
\includegraphics[scale=0.7]{../common_pictures/ov_bati.png}
114+
\end{center}
115+
\end{frame}
116+
117+
\subsubsection{Scope of objects}
118+
\begin{frame}
119+
\frametitle{Scope of objects}
120+
\framesubtitle{Global or local assets}
121+
\begin{center}
122+
\begin{center}
123+
\includegraphics[scale=0.45]{../common_pictures/global-vs-local.png}
124+
\end{center}
125+
\end{center}
126+
\end{frame}
127+
128+
\subsubsection{Inheritance on impacts}
129+
\begin{frame}
130+
\frametitle{Inheritance on impacts}
131+
\framesubtitle{}
132+
\begin{center}
133+
\begin{center}
134+
\includegraphics[width=12cm]{./pictures/impacts-inheritance.png}
135+
\end{center}
136+
\end{center}
137+
\end{frame}
138+
139+
\subsubsection{Deliverables}
140+
\begin{frame}
141+
\frametitle{Deliverables}
142+
\framesubtitle{}
143+
Shareable and customised templates of deliverables.
144+
\end{frame}

‎20231206/20231206_MONARC-training.tex

Lines changed: 143 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,143 @@
1+
\documentclass[]{beamer}
2+
\usepackage[utf8]{inputenc}
3+
\usepackage{hyperref}
4+
\usepackage{listings}
5+
\lstset{
6+
basicstyle=\fontsize{10}{12}\selectfont\ttfamily,
7+
keywordstyle=\color{blue},
8+
breaklines=true,
9+
showtabs=false,
10+
showstringspaces=false,
11+
numberstyle=\tiny\color{mygray}
12+
}
13+
% \usepackage[french]{babel}
14+
% \uselanguage{French}
15+
% \languagepath{French}
16+
\usepackage{pslatex} % for better PDF on screen
17+
%\usepackage{textcomp}
18+
19+
%\usetheme{AnnArbor}
20+
%\usetheme{Antibes}
21+
%\usetheme{Berkeley}
22+
%\usetheme{Berlin}
23+
%\usetheme{Boadilla}
24+
\usetheme{CambridgeUS}
25+
%\usetheme{Copenhagen}
26+
%\usetheme{Dresden}
27+
%\usetheme{Frankfurt}
28+
%\usetheme{Goettingen}
29+
%\usetheme{Hannover}
30+
%\usetheme{JuanLesPins}
31+
%\usetheme{Marburg}
32+
%\usetheme{Montpellier}
33+
%\usetheme{PaloAlto}
34+
%\usetheme{Pittsburgh}
35+
%\usetheme{Rochester}
36+
%\usetheme{Singapore}
37+
%\usetheme{Szeged}
38+
%\usetheme{Warsaw}
39+
40+
41+
42+
% Set Color ==============================
43+
% Custom colors tested with CambridgeUS.
44+
% If you want a nice looking presentation,
45+
% simply comment this section.
46+
\usepackage{xcolor}
47+
48+
% http://www.computerhope.com/htmcolor.htm
49+
\definecolor{gold}{HTML}{FDD017}
50+
\definecolor{deep sky blue}{HTML}{3BB9FF}
51+
\definecolor{light sky blue}{HTML}{82CAFA}
52+
\definecolor{casesBlue}{HTML}{0072b8}
53+
54+
\makeatletter
55+
\definecolor{mybackground}{HTML}{82CAFA}
56+
\definecolor{myforeground}{HTML}{0000A0}
57+
58+
\setbeamercolor{normal text}{fg=black,bg=white}
59+
\setbeamercolor{alerted text}{fg=red}
60+
\setbeamercolor{example text}{fg=black}
61+
62+
\setbeamercolor{background canvas}{fg=myforeground, bg=white}
63+
\setbeamercolor{background}{fg=myforeground, bg=mybackground}
64+
65+
\setbeamercolor{palette primary}{fg=black, bg=gold}
66+
% \setbeamercolor{palette secondary}{fg=black, bg=gray!20!white}
67+
\setbeamercolor{palette secondary}{fg=white, bg=casesBlue!80!gold}
68+
\setbeamercolor{palette tertiary}{fg=white, bg=casesBlue}
69+
% \makeatother
70+
71+
% Set Color ==============================
72+
73+
74+
\hypersetup{
75+
pdfkeywords = {MONARC, NC3, training, security},
76+
% pdfpagemode = FullScreen
77+
}
78+
79+
% Navigation menu
80+
% disable options by commenting appropriate line
81+
\setbeamertemplate{navigation symbols}{%
82+
\insertslidenavigationsymbol
83+
\insertframenavigationsymbol
84+
\insertsubsectionnavigationsymbol
85+
\insertsectionnavigationsymbol
86+
\insertdocnavigationsymbol
87+
\insertbackfindforwardnavigationsymbol
88+
}
89+
90+
91+
% contenu de la page de titre
92+
\title[Introduction to MONARC]{Introduction to MONARC}
93+
\subtitle{Optimised Risk Analysis Method}
94+
\author[NC3]{Luxembourg House of Cybersecurity / NC3}
95+
\institute[]{\href{https://www.nc3.lu}{National Cybersecurity Competence Centre of Luxembourg}}
96+
\date{December 06, 2023}
97+
% \date{\today{}}
98+
\logo{\includegraphics[height=0.5cm]{../common_pictures/logo_lhc.png}}
99+
\newsavebox{\logoA}
100+
\newsavebox{\logoB}
101+
\savebox{\logoA}{\includegraphics[width=3.0cm]{../common_pictures/logo_lhc.png}}
102+
\savebox{\logoB}{\includegraphics[height=1.5cm]{../common_pictures/logo-monarc.png}}
103+
\titlegraphic{%
104+
\raisebox{.5\dimexpr\ht\logoB-\ht\logoA}{\usebox{\logoA}}% raise smaller logo into position
105+
\hspace*{5cm}%
106+
\usebox{\logoB}
107+
}
108+
% End of preamble
109+
110+
111+
\begin{document}
112+
\begin{frame}
113+
\titlepage
114+
\end{frame}
115+
116+
117+
% Content
118+
\include{1-introduction/introduction}
119+
\include{2-method/method}
120+
\include{3-tool/tool}
121+
% \include{3.1-modules/modules}
122+
% \include{4-roadmap/roadmap}
123+
\include{5-services/services}
124+
125+
126+
%
127+
% SECTION: End of the presentation
128+
%
129+
\section*{End of the presentation}
130+
\begin{frame}
131+
\frametitle{End of the presentation}
132+
\framesubtitle{}
133+
\begin{center}
134+
\begin{itemize}
135+
\item Thank you for listening.
136+
\item Contact: [email protected]
137+
\item \url{https://github.com/NC3-LU}
138+
\item \url{https://github.com/monarc-project}
139+
\item \url{https://www.monarc.lu}
140+
\end{itemize}
141+
\end{center}
142+
\end{frame}
143+
\end{document}

0 commit comments

Comments
 (0)