Pro CERT

1,246 views

Published on

Published in: Technology, Business
0 Comments
0 Likes
Statistics
Notes
  • Be the first to comment

  • Be the first to like this

No Downloads
Views
Total views
1,246
On SlideShare
0
From Embeds
0
Number of Embeds
115
Actions
Shares
0
Downloads
8
Comments
0
Likes
0
Embeds 0
No embeds

No notes for slide

Pro CERT

  1. 1. www.Pro-CERT.ro
  2. 2. <ul><li>Early Detection </li></ul><ul><li>Handling & Remediation </li></ul><ul><li>Prevention </li></ul>Pro CERT : Incident Management
  3. 3. <ul><li>Incident Triage: What hit me? </li></ul><ul><li>Attacker Profiler : Who is behind this ? </li></ul><ul><li>Sizing the Incident: How hard was I hit ? </li></ul>Incident Triage
  4. 4. <ul><li>Root cause analysis </li></ul><ul><li>Contacting law enforcement, CERTs </li></ul><ul><li>Documenting and reporting the incident </li></ul><ul><li>Public announcements </li></ul>Incident Coordination
  5. 5. Incident Resolution <ul><li>Removing the Exploits </li></ul><ul><li>Fixing Vulnerabilities </li></ul><ul><li>Patch Management </li></ul><ul><li>Risk Analysis </li></ul><ul><li>Business Continuity </li></ul><ul><li>Disaster Recovery </li></ul><ul><li>Evidence Collection </li></ul><ul><li>Digital Forensics </li></ul>
  6. 6. Proactive Services - People www.securitytraining.ro
  7. 7. Proactive Services - Technologies <ul><li>Managed Networking & Security Devices </li></ul><ul><li>Security Information and Event Management </li></ul><ul><li>Honeypots (SMTP, HTTP, Other) </li></ul><ul><li>Security Assements & Penetration Testing </li></ul>
  8. 8. Proactive Services - Processes <ul><li>Procedures, Incident workflow </li></ul><ul><li>Ticket management system </li></ul><ul><li>International Affiliation : MSPAlliance </li></ul>
  9. 9. www.pro-cert.ro [email_address]

×