2026-05-07 –, IFEN room 1, Workshops and Detection Engineering village (Building D)
LuCy is the 3-year odyssey to bring a new security solution closer to the R&E community in Luxembourg. The open-source project is integrated into an existing IT infrastructure - but wait, why not open it to our Luxembourgish R&E community and that at a low cost! After some reflection it became clear that with a bit of effort the security tools can also be used by the community!
This presentation will be the conclusion on the LuCySe4RE project, presenting the overall highs and lows of the project from a technical, awareness as well as from the human perspective.
As a conclusion, focus will be put on new challenges that emerged after the move from prototype to a fully fully-fledged service, as well as explain new risks that we did not identify before.
In this presentation we will share our lessons-learned from our journey from a prototype to a tool in production and hopefully reach others to start their journey with implementing and promoting open-source projects in their community in future!
LuCy is a mostly open-source cybersecurity toolbox consisting of a SIEM and a DNS firewall. Due to limited resources, a significant amount of R&E (research and education) institutions cannot deploy an inhouse cybersecurity solution.
Therefore, LuCy was brought into this world to offer these services, such as alerting, dns filtering, dashboards, to the R&E institutions to improve their resilience at a reduced cost. We highly value the input from institutions connected to LuCy for continuous improvement of the platform.
Data sovereignity is crucial, thus everything is hosted on premises at the Restena Foundation in Luxembourg.
We are working on reports and documentation so that any other SME can deploy this open-source cluster on their premises.
Open-source is the way to go! Lessons learned from implementing a cybersecurity tool which needs half of the staff. Not to lose motivation also in tough times. Keep the mindset, open source is needed in our community!
Denim Latić is working as a security analyst and part of the CSIRT for Fondation Restena, the NREN of Luxembourg.
Cybersecurty is an ever-evolving field and so, he embarks on a perpetual journey to do his best to be able to face new and old threats in the cyberspace. Furthermore, he is enthusiastic about raising awareness on cybersecurity related issues to both small and large audiences.
Cynthia Wagner is the Chief Information Security Officer and Security Manager at the Restena Foundation, the national research and education network in Luxembourg. Previously, Cynthia was managing the Restena-Computer Security Incident Response Team. Besides her daily work, she is an active member in different working groups at Geant (the collaboration of European National Research and Education Networks) and CENTR (Council of European National Top-Level Domain Registries). The more, she is the founder of Restena’s CyberDay.lu and the Data Privacy Day conference.
In her spare time, she loves to exploit new recipes in her kitchen (successfully and not...).