Security Innovation Lab

A hands-on environment for security innovation

The Security Innovation Lab is designed as a dedicated, hands-on environment for security experimentation and development. It provides a controlled, uninterrupted space where new security features developed within the work package can be tested, validated, and refined.

Beyond internal development work, the lab also acts as an incubator for ideas from project NRENs supporting experimental setups that would be difficult to realise in production environments.

Built on a flexible technical foundation

The lab is built around a flexible technical foundation, combining servers, virtualisation platforms, and network equipment connected through a dedicated link to the GÉANT backbone. This setup enables a wide range of use cases, from controlled testing of security tools and analysis equipment to more exploratory, research-driven experiments.

Early connectivity and pragmatic progress

Interim connectivity via DFN-CERT has already enabled external access, and the first machine in the lab is now reachable from the public internet via the GÉANT path. Once complete, the full upstream GÉANT connection will provide the stable, dedicated backbone connectivity required for more advanced experimentation.

Experiments already underway

The lab is already hosting five defined experimental projects, with additional ideas emerging from discussions at Security Days 2026. One particularly promising outcome is a planned DDoS-related experiment, which is being shaped into one of the first full-scale use cases for the new infrastructure.

Looking ahead

Community engagement around the lab is set to grow further. New ideas are continuously being gathered to connect with potential contributors, and explore how the lab can evolve as a shared resource for security innovation across the GÉANT community.

Current experiments and updates are available via the GN5-2 WP8 documentation and reports.

Get involved

Interested contributors can reach the team via this contact form:

    *Indicates a required field.

    Skip to content