Practical security for EGI Site Adminstrators

This session is a part of EGI2026.

The training will cover the following topics:

• Review of real-world security incidents affecting EGI and similar infrastructures
• Linux logging mechanisms and available log sources
• Log analysis and event correlation for incident investigation
• Attacker techniques for manipulating or evading logging
• Secure system deployment and operational best practices, such as configuration management, patch management, least privilege and network segmentation.
• Secure authentication and access management, covering SSH security, multi-factor authentication, account and credential management, password policies, and protection against brute-force attacks.
• Kernel and container security, including Linux namespaces, container-related security considerations, and recommended hardening measures for production environments.

Learning Objectives

After completing the training, participants will be able to:

• Recognize common security threats and attack scenarios affecting Linux systems.
• Analyze and correlate system logs to investigate security events.
• Understand how to configure and manage Linux logging to support effective monitoring and incident response.
• Understand Linux system hardening best practices, including secure configuration, authentication and access control, logging, monitoring, and container security.