State of the Practice of Computer Security Incident Response Teams ...

[OCIPEP 03]
Office of Critical Infrastructure Protection and Emergency Preparedness.
http://www.ocipep.gc.ca/home/index_e.asp (2003).
[Oppenheimer 97] Oppenheimer, David L.; Wagner, David A.; & Crabb, Michele D.
“System Security: A Management Perspective.” Short Topics in System
Administration, Thousand Oaks, CA: SAGE Publications, Inc.,
1997.
[Potter 02] Potter, C. & Smith, G. “Information Security Breaches Survey 2002,
Executive Summary.” Available from http://www.securitysurvey.gov.uk/
(2002).
[Power 02]
Power, Richard. 2002 CSI/FBI Computer Crime and Security Survey.
Computer Security Institute.
http://www.gocsi.com/press/20020407.html (2002).
[Rand 03]
Rand Europe. Computer Security Incident Response Team Handbook
of Legislative Procedures. http://www.iaac.org.uk/csirt.htm (2003).
[Rezmierski 98]
Rezmierski, V.; Carroll, A.; & Hine, J. ”Incident Cost Analysis and
Modeling Project (ICAMP) I.” http://www.cic.uiuc.edu/groups/CIC
/listICAMPreports.shtml (1998).
[Rezmierski 00]
Rezmierski, V.; Carroll, A.; & Hine, J. ”Incident Cost Analysis and
Modeling Project (ICAMP) II.” http://www.cic.uiuc.edu/groups/CIC
/listICAMPreports.shtml (2000).
[Richardson 03]
Richardson, Robert. 2003 CSI/FBI Computer Crime and Security
Survey. http://www.gocsi.com/press/20030528.jhtml (2003).
[Rothke 02] Rothke, Ben. “Parts of the Plan.” InfoSecurity News Magazine 13, 8
(2002).
[SANS 98]
The SANS Institute. Computer Security Incident Handling Step-by-
Step. The SANS Institute, October, 1998.
[SANS 03]
The SANS Institute. Computer Security Incident Handling Step-by-
Step. The SANS Institute, October, 2003. Information on how to acquire
this guide is available at http://store.sans.org/.
254 CMU/SEI-2003-TR-001