NIST on Several Things
End of last week, NIST published four Draft Special Publications on e-mail security, intrusion detection and prevention, web services security, and cell phone forensics.
Incident Response Archives
September 6, 2006
April 25, 2006
NIST on Security Log Management
As noted in the loganalysis mailing list, NIST published Draft Special Publication 800-92 Guide to Computer Security Log Management (Acrobat PDF):
"This document provides detailed information on developing, implementing, and maintaining effective log management practices throughout an enterprise. It includes guidance on establishing a centralized log management infrastructure, which includes hardware, software, networks, and media. It also discusses the log management processes that should be put in place at an organization-wide level, including the definition of roles and responsibilities, the creation of feasible logging policies, and the division of responsibilities between system-level and organization-level administrators. Guidance is also provided on log management at the individual system level, such as configuring log generating sources, supporting logging operations, performing log data analysis, and managing long-term data storage."
April 20, 2006
Security incident investigations within banks
BankInfoSecurity.com published the first part of an article (free registration required) which provides a general overview of the security investigation process, how it fits within the incident response process, the required preparation process, specific issues in banks that need to be considered and the relationship between this process and security intelligence activities.
Update 2006/4/27: Part two has been published.
About Incident Response
This page contains an archive of all entries posted to never-ever-****-with-my.net in the Incident Response category. They are listed from newest to oldest.
Forensics is the previous category.
Patch Management is the next category.
Many more can be found on the main index page or by looking through the archives.
Author & Licensing
My name is Laurent de la Vaissière. I am an IT Audit and Security consultant working for a professional services firm.
The views expressed on this web site are mine alone and do not necessarily reflect the views of my employer.
The views expressed on this web site are mine alone and do not necessarily reflect the views of my employer.
