Management strategies for implementing forensic security measures

Information Security Technical Report

Volumn 8, Issue 2, 2003, Pages 55-64

  Wolfe Wilson, Jeni ^a   Wolfe, Henry B ^b  

^a MINISTRY OF HEALTH   (New Zealand)

^b UNIVERSITY OF OTAGO   (New Zealand)

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER CRIME; COMPUTER NETWORKS; COMPUTER SYSTEM RECOVERY; INFORMATION MANAGEMENT; LAW ENFORCEMENT; LAWS AND LEGISLATION; PUBLIC POLICY; SOCIETIES AND INSTITUTIONS;

INFRASTRUCTURE;

SECURITY OF DATA;

EID: 1942505732     PISSN: 13634127     EISSN: None     Source Type: Journal    
DOI: 10.1016/S1363-4127(03)00207-3     Document Type: Note

References (8)

1. Francis Bacon (1561-1626) in a letter to the Earl of Essex 1598.
2. CSI/FBI Annual Security Survey 2003 - (Computer Security Institute/Federal Bureau of Investigation) the number of internal and external incidents over the past five years is approximately equal, see page 7 of the Survey. The 2003 Survey can be obtained from: www.gocsi.com/press/20020407. jhtml;jsessionid=LY1UTACFKM3BCQSNDBCSKHSCJUMEIJVN?_requestid=87673.
3. Sources of standards - ISO/IEC 17799:2001 Information Technology - Code of Practice for Information Security Management ( http://csrc.nist.gov/ publications ). Other risk management standards may be found at: SANS (SysAdmin, Audit, Network, Security Institute, www.sans.org ) and NIST (National Institute of Science and Technology, www.nist.gov ).
4. FTC settles with Guess on Web vulnerabilities, Computerworld 19 June 2003, www.computerworld.com .
5. US Department of Justice, Electronic Crime Scene Investigation: A Guide for First Responders, Washington DC, July 2001, NCJ-187736, www.ojp.gov:80/nij/ pubs-sum/187736.htm.
6. Vogon International Limited - this UK organization provides forensics as well as data recovery services, www.vogon-computer-evidence.com.
7. CERT - Computer Emergency Response Team located at Carnegie-Mellon University, Pittsburgh, Pennsylvania, www.cert.org . There are several such organizations around the world- for example: Janet-CERT, DoD-CERT, AusCERT, DFN-CERT.A definitive list may be found at www.first.org/team-info.
8. FIRST - Forum of Incident Response and Security Teams. This can be found on the Internet at www.first.org.