Hands-on Cybersecurity for Media Broadcast Engineers and Technicians

Hands-on Cybersecurity for Media Broadcast Engineers and Technicians

Overview

Cyberattacks have become a critical risk for broadcasters. Several major hacks have occurred in recent years showing the tremendous damage that cyberattacks can have on the media industry.

Re-enforcing cybersecurity in broadcast is everyone’s responsibility. As an engineer or technician in production, you need to learn about IT vulnerabilities, in theory and practice.

In this hands-on Master Class, through lectures, demos and exercises, you will get the skills and knowledge you need to identify equipment vulnerabilities, secure working processes and mitigate the risks of cyber-attacks on your production. 

WHO IT’S FOR

  • Broadcast Production technicians and engineers
  • Professionals with little or no media cybersecurity knowledge and experience
  • 10 -12 pax max

SKILLS

Business: Understand the cyber risks that production equipment constitutes for your media organization

Safety & security:

  • Learn about cybersecurity essentials.
  • Learn how to assess and mitigate the vulnerabilities of your production equipment and network.
  • Play an active part in strengthening the cyber security of your media organization.

CONTENT OUTLINE

  • Understand what cybersecurity vulnerabilities are, how to categorize and rank them,
  • Understand Security Testing Guidelines and the work of the EBU on the matter,
  • Learn how to detect cybersecurity vulnerabilities through practical testing exercises on equipment (switch, encoder, converter, camera…) and network,
  • Review what to do in case of exiting vulnerabilities and what information to disclose to whom,
  • Learn from real-live cyber attack case studies and discuss cybersecurity challenges with

peers in a safe environment.

SCHEDULE

Day 1: 13:00 – 17:30

Day 2: 09:00 – 13:00

PRACTICE

Trainees will have the opportunity to test various types of equipment using vulnerability scanners and tools.

COURSE OUTLINE

Day 1

  • Introductions & objectives
  • Introductory demo
  • Security recommendations
  • Vulnerability scanning exercise
  • Vulnerability exist, what to do next ?

Day 2

  • Vulnerability and risk assessment
  • Hands-on exercises (CVSS; Scanning)
  • Case studies & open discussion
  • Key take aways and wrap-up.

EQUIPMENT NEEDED

It is recommended that trainees bring their own laptop.

Meet your faculty

Gerben Dierick

Chief Information Security Officer at VRT

Gerben Dierick is Chief Information Security Officer at VRT, and co-chair of the EBU Media Cyber Security group. He has worked in and lectured on cybersecurity for over 20 years. Gerben enjoys digging deep into the technical details as well as working on the human and policy level.

Jakob Pfister

IT security engineer at ARGE Rundfunk-Betriebstechnik's Information Security and Technology dept

IT security engineer at ARGE Rundfunk-Betriebstechnik's Information Security and Technology dept. (common subsidiary of ARD and ZDF in Germany).
Jakob started as a broadcast system engineer (mainly testing NLEs/Storage) and shifting focus to security over time.  Since 2012, Jakob has been working full time in IT security covering topics such as Penetration-Testing Broadcast (and other IT-) Systems, building custom testing-software and auditing concepts and deployments. Furthermore, Jakob has been giving training courses on IT security and pushing open source software. Jakob is active in EBU MCS group with focus on security testing.