What is FIRST?
1 отговора
56 прегледа
What is FIRST?
An almost continuous stream of security-related incidents is affecting millions of computer systems and networks throughout the world. To address this threat, a growing number of government and private sector organizations around the globe have established a coalition to exchange information and coordinate response activities.
This coalition, the Forum of Incident Response and Security Teams (FIRST), brings together a variety of computer security incident response teams from government, commercial, and academic organizations. FIRST aims to foster cooperation and coordination in incident prevention, to prompt rapid reaction to incidents, and to promote information sharing among members and the community at large. Currently FIRST has more than 100 members.
Why have a FIRST?
In November 1988, a computer security incident known as the "Internet worm" brought major portions of the Internet to its knees. Reaction to this incident was isolated and uncoordinated, resulting in much duplicated effort, and in conflicting solutions. Weeks later, the CERT* Coordination Center was formed. Soon after, the United States Department of Energy formed the Computer Incident Advisory Capability (CIAC) to serve its constituents.
Over the next two years, the number of incident response teams continued to grow, each with its own purpose, funding, reporting requirements, and constituency. The interaction between these teams experienced difficulties due to differences in language, timezone, and international standards or conventions. In October 1989, a major incident called the "Wank worm" highlighted the need for better communication and coordination between teams.
The FIRST was formed in 1990 in response to this problem. Since that time, it has continued to grow and evolve in response to the changing needs of the incident response and security teams and their constituencies.
By 2002, the Internet had grown from 60,000 host computer systems to 150 million in nearly all countries in the world (see Internet Domain Survey at the Internet Software Consortium). Many companies now rely on the Internet in their daily business transactions. Incident response and security teams continue to form around the globe, covering a range of constituencies from whole countries, to multi-national organizations. The FIRST membership consists of teams from a wide variety of organizations including educational, commercial, vendor, goverment and military.
What are the goals of the FIRST?
The goals of the FIRST are:
fostering cooperation among information technology constituents in the effective prevention, detection, and recovery from computer security incidents;
providing a means for the communication of alert and advisory information on potential threats and emerging incident situations;
facilitating the actions and activities of the FIRST members including research, and operational activities; and
facilitating the sharing of security-related information, tools, and techniques.
[линк]
This coalition, the Forum of Incident Response and Security Teams (FIRST), brings together a variety of computer security incident response teams from government, commercial, and academic organizations. FIRST aims to foster cooperation and coordination in incident prevention, to prompt rapid reaction to incidents, and to promote information sharing among members and the community at large. Currently FIRST has more than 100 members.
Why have a FIRST?
In November 1988, a computer security incident known as the "Internet worm" brought major portions of the Internet to its knees. Reaction to this incident was isolated and uncoordinated, resulting in much duplicated effort, and in conflicting solutions. Weeks later, the CERT* Coordination Center was formed. Soon after, the United States Department of Energy formed the Computer Incident Advisory Capability (CIAC) to serve its constituents.
Over the next two years, the number of incident response teams continued to grow, each with its own purpose, funding, reporting requirements, and constituency. The interaction between these teams experienced difficulties due to differences in language, timezone, and international standards or conventions. In October 1989, a major incident called the "Wank worm" highlighted the need for better communication and coordination between teams.
The FIRST was formed in 1990 in response to this problem. Since that time, it has continued to grow and evolve in response to the changing needs of the incident response and security teams and their constituencies.
By 2002, the Internet had grown from 60,000 host computer systems to 150 million in nearly all countries in the world (see Internet Domain Survey at the Internet Software Consortium). Many companies now rely on the Internet in their daily business transactions. Incident response and security teams continue to form around the globe, covering a range of constituencies from whole countries, to multi-national organizations. The FIRST membership consists of teams from a wide variety of organizations including educational, commercial, vendor, goverment and military.
What are the goals of the FIRST?
The goals of the FIRST are:
fostering cooperation among information technology constituents in the effective prevention, detection, and recovery from computer security incidents;
providing a means for the communication of alert and advisory information on potential threats and emerging incident situations;
facilitating the actions and activities of the FIRST members including research, and operational activities; and
facilitating the sharing of security-related information, tools, and techniques.
[линк]