An Improved Framework for Incident Handling

Information Security Journal

Volumn 22, Issue 1, 2013, Pages 1-9

  Usmani, Kaleem ^a   Mohapatra, A K ^b   Prakash, Nupur ^c  

^a Computer Emergency Response Team ^*  (Mauritius)

^b INDIRA GANDHI DELHI TECHNICAL UNIVERSITY FOR WOMEN   (India)

^c GURU GOBIND SINGH INDRAPRASTHA UNIVERSITY   (India)

Author keywords

CERT; critical information infrastructure (CII); incident handling; Internet traffic monitoring framework (ITMF); security incident response team (SIRT)

Indexed keywords

CERT; CRITICAL INFORMATION; INCIDENT HANDLING; INTERNET TRAFFIC MONITORING; SECURITY INCIDENT;

DISASTERS; INTERNET SERVICE PROVIDERS;

HUMAN RESOURCE MANAGEMENT;

EID: 84880984606     PISSN: 19393555     EISSN: 19393547     Source Type: Journal    
DOI: 10.1080/19393555.2012.751565     Document Type: Article

References (14)

1. Anders, G. (2007). Towards robust traffic engineering in IP networks http://www.ee.kth.se/php/modules/./2007/TRITA-EE_2007_073.pdf (http://www.ee.kth.se/php/modules/./2007/TRITA-EE_2007_073.pdf)
2. Antonio, S. D., Oliviero, F. and Setola, R. 2006. High-speed intrusion detection in support of critical infrastructure protection. Critical Information Infrastructure Security, 4347: 222 - 234.
3. Awduche, D., Chiu, A., Elwalid, A., Widjaja, I. and Xiao, X. 2002. Overview and principles of Internet traffic engineering. RFC, 3272: 4 - 7.
4. Cisco Systems. (n.d.). Remote monitoring. Internetworking technologies handbook (Chapter 55), 1992-2006 http://www.cisco.com/en/US/docs/Internetworking/technology/handbook/RMON.htm (http://www.cisco.com/en/US/docs/Internetworking/technology/handbook/RMON.htm)
5. Cisco Systems. (n.d.). Cisco IOS netflow data sheet, 1992-2006 http://www.cisco.com/en/US/products/ps6601/products_data_sheet0900aecd80173f71.htm (http://www.cisco.com/en/US/products/ps6601/products_data_sheet0900aecd80173f71.htm)
6. CNM. (2006, November 14). Active network performance measurement and estimation http://www.imse.cnm.es/fedemp/abet/index.html (http://www.imse.cnm.es/fedemp/abet/index.html)
7. James, C. (2000). Passive Measurement http://wand.cs.waikato.ac.nz/old/wand/publications/jamie_420/final/node9.html (http://wand.cs.waikato.ac.nz/old/wand/publications/jamie_420/final/node9.html)
8. Mandia, K., Prosise, C. and Pepe, M. 2006. Incident response and computer forensics. TMH,: 14 - 15.
9. Payne, S. C. 2006. A guide to security metrics, Sans Institute Infosec Reading Room.
10. ProCurve Networking by MP. (2005). Traffic Management for the Enterprise http://www.hp.com/rnd/pdfs/traffic_management_paper.pdf (http://www.hp.com/rnd/pdfs/traffic_management_paper.pdf)
11. Ryba, M., Sulwinski, J. and Poniewierski, A. 2009. The methodology for managing the abuse of IT systems. Information Security Journal: A Global Perspective,: 107 - 115.
12. Scarfone, K., Grance, T. and Masone, K. 2008. Computer Security Incident Handling Guide. NIST Special Publication 800-61, pp.,: 4 - 9.
13. Sellens, J. (2000). System and network monitoring.;login: http://www.usenix.org/publications/login/2000-6/features/monitoring.html (http://www.usenix.org/publications/login/2000-6/features/monitoring.html)
14. Viipuri, T. (2004). Traffic analysis and modeling of IP core networks. Master Thesis, Helsinki University of TechnologyRetrieved from http://www.netlab.tkk.fi/julkaisut/tyot/diplomityot/1039/diplomityo.pdf (http://www.netlab.tkk.fi/julkaisut/tyot/diplomityot/1039/diplomityo.pdf)