Register or Login
to gain full access
to the Resources of the
Center for eGovernance
Program @ SEE

View the Training
Workshops Schedule

The Center for eGovernance Program @ SEE includes a scheduled set of Executive Training Workshops aimed at providing a valuable opportunity for capacity building of governmental officials in the field of eGovernment development. During the course of the Program the following Training Workshops have been or will be delivered:

Training Workshop on Practical Aspects of Security
 

Recognising electronic security as a fundamental part of the development of trustworthy eGoverment applications, INA Academy organised the first Executive Training Workshop on Practical Aspects of Security, in the framework of the Regional eSecurity Forum.


Executive Training in Electronic Government
 

A major scheduled activity of the Program is the organisation of a series of 5 Executive Training Workshops on eGovernment in 5 Western Balkan countries. A single workshop agenda has been developed to transfer valuable experience by regional experts to government officials, responsible for developing eGovenrment services in these 5 SEE countries.This Agenda is then adjusted to the needs of the local participants and provides room for the local experts to present recent developments in each target country.

These 5 Workshops will take place between February 2009 and April 2009 in Belgrade, Podgorica Sarajevo, Skopje and Tirana.

Training Workshop on Practical Aspects of Security
The workshop held on the 7th November 2008, in parallel with the 4th Regional Electronic Security Forum. Six lectures were given on dedicated practical topics that include:

• Cryptography and the Internet: Introducing basic concepts of cryptography (public/symmetric key cryptography, message authentication codes, signatures, etc.) along with the security properties they achieve and then continue with necessary requirements to make cryptography possible. Conclude by considering the penetration of cryptography in the Internet.
• Real world security protocols: Dissect three popular protocols used to secure today’s Internet communications, namely SSL, IPSEC, and KERBEROS. SSL’s lack of transparency limits it primarily to HTTP web services and some e-mail systems. IPSEC on the other hand operates at the Internet layer offering transparent layer security to all layers above it. This includes all TCP and UDP traffic as well as application layer messages. Finally, KERBEROS is a distributed architecture that provides a solution to the Single Sign On problem. Describe the benefits of each with emphasis on the services they provide rather than their low-level details.
• WEP and WPA: Outline the serious security flaws in the protocol, stemming from misapplication of cryptographic primitives in the Wired Equivalent Privacy (WEP) protocol used by the 802.11 standard for wireless networks. The flaws demonstrate that WEP fails to achieve its security goals, offering limited protection to the users of wireless services. Conclude with a look at modern standards offering significantly better security than WEP.
• Semantic attacks-Phishing: Bruce Schneier categorizes methods for attacking computer networks in waves of increasing sophistication and abstraction: Physical attacks. Syntactic attacks and Semantic attacks, which target the way we, as humans, assign meaning to content, e.g. Phishing. Describe various attack techniques used by phishers to elicit personal or sensitive information, study possible countermeasures and develop a set of hypotheses about how users are deceived. Conclude with a test, asking participants to determine if a site or email is real or fraudulent.
• Federated Identity Management: Federated identity management lets users dynamically distribute identity information across security domains, increasing the portability of their digital identities. It also raises new architectural challenges and significant security and privacy issues. Provide a range of perspectives on identity management systems and review three models of federated identity SAML, OpenID, and Cardspace. Examine usability challenges for identity management systems, including flaws and risks related to design and deployment. 

Executive Training in Electronic Government

The Centre for e-Governance Program organised a series of five executive seminars that will be held in the SEE region (Republic of Albania, Bosnia and Herzegovina, Montenegro, Republic of Serbia and Former Yugoslav Republic of Macedonia) until May 2009. The seminars are intended for policy makers, executive members of governmental institutions and organisations and other private/public sector experts.

Participants will give a brief introductory tutorial on e-Government development, services and policies. Local experts will present the current status in e-Government frameworks and projects and will have the opportunity to discuss these issues with the workshop’s trainers. It is planned to have a session on the current standards and practices for organizational, semantic and technical interoperability. Furthermore, the seminar will analyse key governmental projects and will bring a discussion on project funding mechanisms. Finally, participants will have the chance to examine local e-Government transformation and be informed on international and EU best practices and Case Studies.