Publications Office of the EU
Actionable information for security incident response
DisplayCustomHeader
MyPortal
čeština
BasketSummary
Webový obsah - zobrazení
Publication Detail Actions Portlet

Nástroje

Publication Detail Actions Portlet
 Uživatelské hodnocení
custom-survey-notification
Publication Detail Portlet

Publication detail

Home

Actionable information for security incident response

Metadata o publikaci

In the world of incident response, information is everything. The sooner incidents and vulnerabilities are detected and understood, the faster they can be handled and the less damage is caused. Accurate and timely information may help incident handlers reduce the number of infections, or address vulnerabilities before they are exploited. Unfortunately, although security information sharing is now commonplace, it has not always improved the situation for incident response teams. Extracting timely information, that can be immediately acted on from vast amounts of all types of data flowing in, remains a challenge. This type of information is referred as “actionable information” and identified as one of the fundamental building blocks of successful incident response. This document is intended as a good practice guide for the exchange and processing of actionable information. The report is relevant to incident response in all types of organizations, the primary audience of this study is national and governmental CERTs. The scope of the study is purposefully broad. Many of the issues related to making information actionable for CERTs have not been adequately explored in previous publications. The goal for this report was to touch on a wide variety of challenges that should be addressed in the area of processing information. Another goal of the study is also to outline a general framework that could be used as the basis for future, more detailed, studies.
Zobrazit více
Zobrazit méně
ISBN 978-92-9204-107-6
DOI 10.2824/38111
Katalogové číslo TP-05-14-107-EN-N
PDF
ISSN ISBN 978-92-9204-107-6 DOI 10.2824/38111 Katalogové číslo TP-05-14-107-EN-N
  • Released on EU publications website:
Tato publikace je k dispozici ke stažení v online formátu (PDF) a ve formátu vhodném pro tisk (PDF/X). Více informací o tom, jak si vytisknout vlastní kopii publikací EU, naleznete v Často kladené otázky.
Publication Viewer

Prohlížeč dokumentů

Pop up window annotations