Incident response

✍ Scribed by Jon David

• Book ID: 104391181
• Publisher: Elsevier Science
• Year: 1999
• Tongue: English
• Weight: 473 KB
• Volume: 1999
• Category: Article
• ISSN: 1353-4858
• DOI: 10.1016/s1353-4858(00)80005-7

✦ Synopsis

A typical networked operation will observe anywhere from hundreds to thousands of improper or at least suspicious events happening to and with its network on a daily basis. Maximal reaction to each and every one of these events is most often impos&ble, certainty very costly, and frequently a waste of time. This writtng will show that the appropriate actions to be taken in response to improper or suspicious events should be based on security policy and risk analysis in all organizations. Further, it will show that the theoretically ideal responses must be adjusted to take into consideratton indtdual conditions within specific organizations.