Benelux security and privacy meeting 2025

Europe/Brussels
Ellipse (Maison du Livre - Esch-sur-Alzette)

Ellipse

Maison du Livre - Esch-sur-Alzette

7, Ënnert den Héichiewen, 4361 Esch-sur-Alzette (Luxembourg)
Description

The Benelux security and privacy is organized by SURFBelnet and the Restena Foundation, respectively acting as the National Research and Education Networks (NREN) for the Netherlands, Belgium and Luxembourg.

The meeting is intended for security and privacy professionals from the research and education communities in Belgium, Luxembourg, and the Netherlands, with a particular focus on the higher education sector.

The draft programme is available below and will be finalised during the summer.

Participants
  • Jan Paredis
  • Stefan Eestermans
  • +12
  • Monday 20 October
    • 12:00 13:00
      Arrival and lunch 1h
    • 13:15 13:45
      Post-it session 30m
    • 13:45 15:00
      Session: Artificial intelligence 1h 15m
      Speakers: Nesryne Mejri (University of Luxembourg), Serge Linckels (Digital Learning Hub Luxembourg), Sümeyye Elif Biber (University of Luxembourg)
    • 15:00 15:30
      Coffee break 30m
    • 15:30 17:00
      Session: Quantum communications 1h 30m

      Quantum computers are no longer just science fiction: they pose real challenges to the cryptographic foundations of today’s digital world. In this session, our guest speakers will first provide a high-level introduction to quantum computing and the security risks it brings. They will then explore two key approaches to safeguard the future - Post-Quantum Cryptography (PQC) and Quantum Key Distribution (QKD) - highlighting their strengths, limitations, and potential impact.

      Speakers: Aysajan Abidin (KU Leuven), Giacomo Carrara (imec)
    • 17:00 17:30
      Wrap-up - Discuss take aways 30m
    • 17:30 19:00
      Hotel check-in 1h 30m
    • 19:00 22:00
      Dinner 3h
  • Tuesday 21 October
    • 09:00 09:30
      Arrival with coffee and tea 30m
    • 09:30 10:30
      Keynote talk: AI factory 1h
      Speaker: Pascal Steichen (European Cybersecurity Competence Center)
    • 10:30 10:45
      Coffee break 15m
    • 10:45 12:00
      Technical Investigation in Compliance Assessments 1h 15m

      Discover the power of technical investigation in compliance assessments. In this interactive workshop we analyse the technical workings of a fictional digital service provider. In small groups, guided by the SURF compliance experts, we explore findings from digital analysis, learn how to interpret them and assess their legal impact. Enhance your technical skills and discover how this type of investigation can be a valuable addition to your compliance framework.

      Speaker: Jan Landsaat (SURF)
    • 12:00 13:00
      Lunch 1h
    • 13:00 14:30
      Security incidents and data breaches 1h 30m

      Session 1: Lessons learned from a Belnet cyberincident - Speaker: Stefan Eestermans, Security Manager at Belnet

      Session 2: DDoS: cause and solutions - speaker: Wim Biemolt, Network Expert at SURF
      The SURF network experienced the largest DDoS attack ever. Although our usual motto is “the more gigabits, the better,” this attack was quite extreme and caused serious disruption on the SURF network. In this talk, SURFcert will discuss what was so special about this attack, what was needed to bring it under control, and which measures have been taken and will be taken to become more resilient.

      Speakers: Marc Ludwig (Lycée Guillaume Kroll), Stefan Eestermans (Belnet), Wim Biemolt (SURF)
    • 14:30 15:00
      Coffee break 30m
    • 15:00 16:00
      Governance and responsabilities 1h

      15.00 - 15.30
      Ownership of data, governance (and a bit of AI). What do we mean exactly?
      Speaker: Raoul Winkens, DPO at Maastricht University

      The terms ownership and governance are widely used. In case of ownership often confusing. Can you own a system, a process, a project or (personal) data? Governance is often used without knowing what governance actually is. Lessons learned from security, data protection might help avoiding these pitfalls when it comes to “AI”, the new kid in town. Formalities with words or getting things right? You be the judge.

      15.30 - 16.00
      Handbook on shaping AI Governance at Dutch universities
      Speaker: Arvin Khozooei, AI Governance Lead at TU Delft

      AI Governance helps universities to integrate AI into their core tasks in a responsible, effective, and future-proof manner. In practice, universities often look to the Chief Privacy Officer (CPO) primarily to explain the rules and ensure compliance of AI systems with legislation, such as the AI Act (AIA). Although it is not entirely surprising that the CPO is approached for this due to their experience gained from implementing the General Data Protection Regulation, managing privacy is only one part of implementing a compliant AI system and meeting regulatory requirements.

      Speakers: Arvin Khozooei (TU Delft), Raoul Winkens (Maastricht University)
    • 16:00 16:30
      Wrap up 30m
    • 16:30 16:40
      End of the meeting 10m