Merit Network
Can't find what you're looking for? Search the Mail Archives.
  About Merit   Services   Network   Resources & Support   Network Research   News   Events   Home

Discussion Communities: Merit Network Email List Archives

North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Incident response (was Re: whois )

  • From: batz
  • Date: Tue Oct 24 10:41:40 2000

On Tue, 24 Oct 2000 wrote:

:Umm... would you be satisfied with a "We've referred it to the appropriate
:people" response?
:At least here, and probably many other universities, we're stuck not being
:able to say much more than that due to student confidentiality rules...
:Yes, we take action.  No, we usually can't say what we did.

A general incident response capability would be usefull, but unfortunately
this requires more cooperation than most companies are willing to give. 

Would it be worthwhile to include security incident handling policies
and procedures in peering agreements? i.e a peering agreement also 
includes a testable disaster recovery plan, and a security incident
response plan. 

It is fairly obvious by now that a peering agreement is more than simply 
an agreement on a router configuration. 

I'm wondering if anyone would consider something like this a little more
robust than the centralized CIRTs and industry associations, as it would
be relative to local policy, and the participants have a direct existing
relationship with each other. This, as opposed to dependance on a neutral
co-ordinating centre which may be dealing with other problems. 

Reluctant Ninja
Defective Technologies

Discussion Communities

About Merit | Services | Network | Resources & Support | Network Research
News | Events | Contact | Site Map | Merit Network Home

Merit Network, Inc.