[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
A Revised Internet-Draft is available from the on-line Internet-Drafts
directories. This draft is a work item of the G and R for Security
Incident Processing Working Group of the IETF.
Title : Expectations for Security Incident Response
Author(s) : N. Brownlee, E. Guttman
Filename : draft-ietf-grip-framework-irt-06.txt
Pages : 35
Date : 07/21/1997
The purpose of this document is to express the general Internet community's
expectations of Security Incident Response Teams (SIRTs). It is not
possible to define a set of requirements that would be appropriate for all
teams, but it is possible and helpful to list and describe the general set
of topics and issues which are of concern and interest to constituent
SIRT constituents have a legitimate need and right to fully understand the
policies and procedures of "their" Security Incident Response Team. One
way to support this understanding is to supply detailed information which
users may consider, in the form of a formal template completed by the SIRT.
An outline of such a template and a filled in example are provided.
Internet-Drafts are available by anonymous FTP. Login with the username
"anonymous" and a password of your e-mail address. After logging in,
type "cd internet-drafts" and then
A URL for the Internet-Draft is:
Internet-Drafts directories are located at:
o Africa: ftp.is.co.za
o Europe: ftp.nordu.net
o Pacific Rim: munnari.oz.au
o US East Coast: ds.internic.net
o US West Coast: ftp.isi.edu
Internet-Drafts are also available by mail.
Send a message to: firstname.lastname@example.org. In the body type:
NOTE: The mail server at ds.internic.net can return the document in
MIME-encoded form by using the "mpack" utility. To use this
feature, insert the command "ENCODING mime" before the "FILE"
command. To decode the response(s), you will need "munpack" or
a MIME-compliant mail reader. Different MIME-compliant mail readers
exhibit different behavior, especially when dealing with
"multipart" MIME messages (i.e., documents which have been split
up into multiple messages), so check your local documentation on
how to manipulate these messages.
Below is the data which will enable a MIME compliant mail reader
implementation to automatically retrieve the ASCII version
of the Internet-Draft.