Today: Sunday, 22 December 2024
-
Information Technology
-
Computer
-
Telecommunications
Provide architecture for response to computer incident in framework NIST sp800-61 and ITIL
Volume 2, Issue 2, 2020, Pages 25 - 30
1 Master engineer computer, Department of computer, Faculty of Electrical and Computer Engineering, Islamic Azad University, Tehran north Branch, Tehran, Iran.
2 Assistant Professor, Department of Computer, Faculty of Electrical and Computer Engineering, Islamic Azad University, Zanjan Branch, Zanjan, Iran.
Abstract :
In this paper provided response architecture for incident. This architecture is made for computer emergency response team (CERT) to incident response. This helps to team just for response. In this architecture used parameters NIST sp800-61 and also this is in framework NIST standard and ITIL framework. This architecture activated after discover incident and gain information about incident. This is response incident after pass a process. This architecture in this process makes documentary, report and etc. for incident response. In addition, defensive center can certain some incident (now can say these are threat) if necessary and when happens these are, CERT impact defensive or offensive to the threat. In the end this architecture can response incident in the form of documentary, limiting system that have response, reports to the defensive center and manager system or organ, defensive or offensive against incident( or threat) and etc.
In this paper provided response architecture for incident. This architecture is made for computer emergency response team (CERT) to incident response. This helps to team just for response. In this architecture used parameters NIST sp800-61 and also this is in framework NIST standard and ITIL framework. This architecture activated after discover incident and gain information about incident. This is response incident after pass a process. This architecture in this process makes documentary, report and etc. for incident response. In addition, defensive center can certain some incident (now can say these are threat) if necessary and when happens these are, CERT impact defensive or offensive to the threat. In the end this architecture can response incident in the form of documentary, limiting system that have response, reports to the defensive center and manager system or organ, defensive or offensive against incident( or threat) and etc.
Keywords :
incident, response, defensive, offensive, ITIL, NIST, incident response.
incident, response, defensive, offensive, ITIL, NIST, incident response.