CSIRT

Search:

Advanced Search

CSIRT (RFC)

Request for Comments (RFC)

Internet Users' Glossary. G. Malkin. August 1996. RFC 1983. This document is the work of the User Glossary Working Group of the User Services Area of the Internet Engineering Task Force. 

Site Security Handbook. B. Fraser. September 1997. RFC 2196
This document provides guidance to system and network administrators on how to address security issues within the Internet community. It builds on the foundation provided in RFC 1244 and is the collective work of a number of contributing authors.

Expectations for Computer Security Incident Response. N. Brownlee, E. Guttman. June 1998. RFC 2350. The purpose of this document is to express the general Internet community's expectations of Computer Security Incident Response Teams (CSIRTs). It is not possible to define a set of requirements that would be appropriate for all teams, but it is possible and helpful to list and describe the general set of topics and issues which are of concern and interest to constituent communities.

Recommended Internet Service Provider Security Services and Procedures. T. Killalea. November 2000. RFC 3013. This document is offered as a set of recommendations to ISPs regarding what security and attack management arrangements should be supported, and as advice to users regarding what they should expect from a high quality service provider. It is in no sense normative in its own right. In time it is likely to become dated, and other expectations may arise. However, it does represent a snapshot of the recommendations of a set of professionals in the field at a given point in the development of the Internet and its technology.

TERENA's Incident Object Description and Exchange Format Requirements. J. Arvidsson, A. Cormack, Y. Demchenko, J. Meijer. February 2001. RFC 3067. This document defines requirements for the Incident object Description and Exchange Format (IODEF), which is the intended product of the Incident Taxonomy Working Group (ITDWG) at TERENA [2]. IODEF is planned to be a standard format which allows CSIRTs to exchange operational and statistical information; it may also provide a basis for the development of compatible and inter-operable tools for Incident recording, tracking and exchange.

The RFC index can be found here!