Incident Response - Softcover

Van Wyk, Kenneth R.; Forno, Richard

 
9780596001308: Incident Response

Synopsis

Seventy percent of businesses reported security breaches in 2000, and the rate is on the rise. Is your organization ready to respond to such an incident head-on? Will you be able to tell whether an incident is an attack or a glitch in the system? Do you know how to assess the possible damage from an incident? Incident Response shows you how to answer questions like these and create a plan for exactly what to do before, during, and after an incident.

The authors of Incident Response draw on years of experience developing and taking part in incident response teams at the highest levels of government and business. They guide you through both the technical and administrative details of effective incident response planning as they describe:

  • What incident response is, and the problems of distinguishing real risk from perceived risk
  • The different types of incident response teams, and advantages and disadvantages of each
  • Planning and establishing an incident response team
  • State of the Hack® information about different types of attacks
  • Recommendations and details about available tools for incident response teams
  • Resources available to incident response teams

Whatever your organization's size or purpose, Incident Response shows how to put in place an incident-response process that's as planned, efficient, and businesslike as any other IT operation in a mature organization. Incidents happen, and being able to respond to them effectively makes good business sense.

"synopsis" may belong to another edition of this title.

About the Author

Kenneth R. van Wyk is an internationally known incident response and anti-virus expert and an active member of the computer security community. He has worked on and managed numerous incident response teams including Carnegie Mellon University's famous CERT/CC, the U.S. Department of Defense's ASSIST incident response team, and SAIC. He is cofounder and chief technology officer for Para-Protect, Inc., a company that specializes in incident response and other operational security services. Richard Forno is a recognized security professional and coauthor of The Art of Information Warfare. He has held high-profile security positions at major companies and government organizations; he helped establish the first incident response team for the United States House of Representatives and provided advisory support to offices of the Department of Defense on information warfare. He is the cofounder of G2-Forward, a prominent information analysis and distribution service supporting the military intelligence and law enforcement communities. In 1998, he became the chief security officer for Network Solutions (the InterNIC), the company responsible for developing and operating the Internet Shared Registry System.

"About this title" may belong to another edition of this title.