State of the Practice of Computer Security Incident Response Teams ...

The project will first attempt to establish a “standardized and unambiguous” language for
data exchange. The project will use and build on IODEF and IDMEF work done by the IETF
and TF-CSIRT. eCSIRT.net aims at employing IODEF, IDMEF, and other relevant techniques
in an operational setting between European national research network CSIRTs involving two
commercial companies active in the CSIRT market.
The technical work is organized as follows:
• preparation phase (“defining a common language”)
• usage phase (“using the common language between partners”)
• clearinghouse function (“gathering incident statistics from partners using the common
language”)
• alert function (“gathering incident data from partners to derive early warnings and emergency
alerts from, and spread these to partners securely”)
More can be read at:
http://www.ecsirt.net/
3.10.1.4 European Information Security Prevention Programme
According to its web site, “The European Information Security Promotion Programme
(EISPP) is a project co-funded by the European Community under the Fifth Framework Programme.
The EISPP project aims to develop a European framework, not only to share security
knowledge but also to define the content and ways of disseminating security information
to SMEs. 146 By providing European SMEs with the necessary IT security services, they will
be encouraged to develop their trust and usage of e-commerce, leading to increased and better
opportunities for new business….The project, started in June 2002 with an expected duration
of 18 months, is run by a consortium of private sector organisations comprising CERTs,
ISP/ASPs, and security professional organisations” [EISPP 03].
One of the objectives of the program is to “Set up a network of expertise among the European
CERTs that will allow them to share and enhance their own preventative material and to
‘open’ it to the other CERTs and organisations involved in prevention” [EISPP 03].
For more information please see:
http://www.eispp.org/
146
“SME” stands for “small and medium enterprises.”
CMU/SEI-2003-TR-001 121