State of the Practice of Computer Security Incident Response Teams ...

CIO, 84, 92
CIRC, 13
CIRT, 13
CISSP, 80
civil liability, 114
CLCERT, 30
clearances, 77
Clearinghouse for Incident Handling
Tools, 119, 127
CNCERT/CC, 28
Code Red worm, 114
collaboration, 26, 119
collecting evidence, 178
Committee of Ministers of the Council of
Europe, 116
Common Advisory Interchange Format,
123
Common Body of Knowledge, 80
common laws, 114
communication
channels of, 112
mechanisms, 18
secure, 105
skills, 76
tools, 101
compliance
department, 51
requirements, 33
compromise, 58
CompTIA, 162
computer crime, 60, 62, 104, 114, 115,
118
computer crime laws, state, 118
Computer Emergency Response Team, 19
Computer Emergency Response Team
Coordination Center-Korea. See
CERTCC-KR
Computer Emergency Response Team for
the German Research Network DFN.
See DFN-CERT
computer forensics. See forensics
Computer Forensics, Incident Response
Essentials, 151
Computer Fraud and Abuse Act, 118
Computer Incident Advisory Capability,
20, 21
Computer Incident Response Guidebook,
155
computer network attack, 82
Computer Network Defense Service
Providers, 80
computer security, 49, 53, 60, 82, 133
experts, 122
incidents, 122
terminology, 134
Computer Security Incident Handling Step
by Step, 152
Computer Security Incident Response
Planning, 97, 153
computer security incident response
teams, ix
computer security incidents, 71, 109
Computer Security Institute (CSI), 157
Computer Security Institute/Federal
Bureau of Investigation Computer
Crime and Security Survey, 60
Computer Security Resource and
Response Center, 21
CONCERT, 46
confidential information, 106
confidentiality, 116
configuration maintenance, 12
consortium sponsorship, 55
constituencies, 22, 49
contact information, 91, 92, 120
containment, 83, 86
Contingency Planning Guide for
Information Technology Systems, 153
contract services, 55
Convention on Cybercrime, 116
coordination, 21
function, 12
issues, 129
mechanisms, 119, 129, 135
network, 20
of teams, 24, 26, 35, 47
with other external entities, 106
with other teams, 106
coordination centers, 14, 53, 69, 89, 99,
107, 108
copyright
law, 116, 171
violations, 58
core team, 73, 74
Cormack, Andrew, xiii
Coroner’s Toolkit, The, 101
corporate security, 73
correlating incident activity, 90
correspondence, capturing data from, 91
costs, 137
computer crime, 62
CSIRT, 54, 57
CMU/SEI-2003-TR-001 261