As a participant in the U. S. Army Vulnerability/Survivability Study Team, the

Many papers about Computer Security Incident Handling have been published in the past [1,4,10]. Therefore the goal of this paper is to concentrate on the practical implications of the DFN-CERT - the Computer Emergency Response Team (CERT) for the German Research Network. Our experiences, our problems, and the lessons learned are presented. In addition, we will describe some recommendations concerning the future development of incident response teams within Europe, emphasizing the importance of a cooperative approach. I. Introduction Since January 1993 the Computer Emergency Response Team for the German Research Network (»Deutsches Forschungsnetz - DFN) has been responsible for more than 400 sites - independent administration units like universities and their departments, research centers, and public sites. It is funded by the German Ministry of Research and Technology. Although the formal constituency is characterized by a network connection to the German Research Network, we provide ...

this document. 1.2 Purpose

Although many papers about Computer Security Incident Handing (CSIH) and the single teams have been published in the past [10,11,13,18], only a very few address the need for more cooperation and support of new teams within Europe. As one of the few CERTs within Europe, the DFN-CERT is very interested in the development of a suitable and efficient infrastructure for the European part of the worldwide network [3]. From this point of view we will describe some of the practical problems, and some possible approaches. To support a more deeper understanding of the actual situation in Europe, we will summarize the past development of CERTs until today. We will also use the results of a survey of European network providers to provide insights into future plans to establish more CERTs in Europe. In addition, we will describe some recommendations concerning the future development of Computer Security Incident Handling within Europe, emphasizing the importance of a cooperative approach and the cr...

One of the most difficult - and challenging - tasks related to build up a new team is the funding process. We are not aware of a publicly available paper which addresses this important aspect in full detail, although short notes can be found in [2]. As the DFN-CERT met this challenge twice in the last two years, it is the right time to collect some thoughts and experiences to provide support to other (especially new) teams. From a practical point of view we will describe some problems, some approaches, and some lessons learned. By no means does this paper imply that we know all of the possible solutions. This paper should be a beginning to collect this kind of information and present it to interested parties. I. Introduction Although the Internet worm of November 1988 or the Internet sniffers of 1994 made it clear that there is a real demand for actions related to the cooperation and communication in case of Computer Security Incidents, it is a challenging task to get funding for a ne...

Many papers about Computer Security Incident Handling have been published in the past [1,4,10]. Therefore the goal of this paper # is to concentrate on the practical implications of the DFN-CERT - the Computer Emergency Response Team (CERT) for the German Research Network. Our experiences, our problems, and the lessons learned are presented. I. Introduction Since January 1993 the Computer Emergency Response Team for the German Research Network (»Deutsches Forschungsnetz - DFN) has been responsible for more than 400 sites - independent administration units like universities and their departments, research centers, and public sites. It is funded by the German Ministry of Research and Technology. Although the formal constituency is characterized by a network connection to the German Research Network, we provide our information to the whole Internet and serve as a clearing house for incidents within Germany on an international scale. Throughout the past year we have observed a growing n...

Abstract not found