Delegation of the National Institute of Telecommunications at the ICCC 2024 Conference in Qatar
26.11.2024
From November 4–6, 2024, the International Common Criteria Conference 2024 (ICCC’24) took place in Qatar with the participation of representatives from the National Institute of Telecommunications. The conference serves as a leading forum for professionals involved in the international cybersecurity standard, Common Criteria (CC).
ICCC is a high-level technical conference, a platform for discussions on policies and applications of the Common Criteria, and a networking opportunity for professionals responsible for the specification, development, evaluation, certification, and approval of IT security in products and systems.
The conference featured government and industry experts from the international Common Criteria community. As in previous years, the National Institute of Telecommunications played a significant role in the event.
Dr. Eng. Piotr Krawiec presented a talk titled "Methodology for Vulnerability Assessment in 5G Networks – the RAN Module Case Study." He shared the results of evaluating the O-DU module of the Open RAN system and discussed an innovative approach to cybersecurity evaluation by combining penetration testing methodology for network devices with the EN 17640 standard, "Cybersecurity Evaluation Methodology for Time-Bounded Assessments."
Dr. Eng. Piotr Wiśniewski delivered a presentation titled "Trucks On and Off the Track: On Evaluation of Motion Sensors." He discussed issues related to replay attacks on communication between components of a digital tachograph in the context of existing EU regulations and technical specifications.
During a panel discussion on recent changes to ISO/IEC 15408 and ISO/IEC 18045 standards (Common Criteria and the Common Evaluation Methodology, respectively), Dr. Eng. Elżbieta Andrukiewicz contributed a pre-recorded video presentation on updates to ISO/IEC 15408-1. Dr. Andrukiewicz serves as the editor of this standard.