Http://@iriss.ie Creating A CERT at WARP Speed.

http://www.iriss.ie [email protected]

Creating A CERT at WARP Speed

2004 – The Journey Begins

Copyright © 2010 IRISS www.irissie 2

What’s Missing?

3Copyright © 2010 IRISS www.irissie

Situation

4

Knowledge Economy “Silicon Valley” Europe

Over 97% of Irish Businesses are SME<50 Employees and Annual Turnover <€10mEver Increasing Dependence on ICTNo Independent Source of InfoSec information

Economy At RiskNational Security and CNI at RiskLack of Data for Law EnforcementSoft Back Door to UK CNI

Copyright © 2010 IRISS www.irissie

Not a Fair Fight !


http://images.google.ie/imgres?imgurl=http://www.33ff.com/flags/XL_flags_embossed/Ireland_flag.gif&imgrefurl=http://www.33ff.com/flags/worldflags/Ireland_flag.html&h=240&w=360&sz=7&hl=en&start=96&tbnid=og95bVtXuAc7MM:&tbnh=81&tbnw=121&prev=/images?q=%22irish+flag%22&start=90&gbv=2&ndsp=18&svnum=10&hl=en&sa=N

Stakeholders


Does Ireland Need a CERT?

Do you think Ireland needs a CERT?

82.39%

17.61%

Yes

No


8

Job Complete?


9

Estonia Effect


10

Job Complete?


11

IRISS Is Born


Who is IRISS-CERT?

12

Ireland’s First CSIRT(Computer Security Incident Response Team)

Provide Services On Information Security

Services Provided Free of Charge

Not For Profit Organisation


Services Offered

Irish Focused Alerts and WarningsVulnerability Awareness Incident AwarenessSanitised Attack NotificationsCoordination Service

Irish Focused ResearchTrends and MetricsGeneral Awareness

Knowledge Sharing Informal discussion Information Sharing & Dissemination


We Serve

Government Bodies and Agencies

Private Sector Companies

SME Sector

Industry Bodies

Other CERTs


15

IRISS Associations


http://images.google.ie/imgres?imgurl=http://dic.academic.ru/pictures/dewiki/69/ENISA_logo.jpg&imgrefurl=http://dic.academic.ru/dic.nsf/dewiki/364663&usg=__hF0yVK2iuBL7s8cqLOB-4gBbQeE=&h=900&w=940&sz=56&hl=en&start=25&tbnid=US9KEDvolvK3JM:&tbnh=142&tbnw=148&prev=/images?q=enisa+logo&gbv=2&ndsp=18&hl=en&sa=N&start=18

16

Sponsors


http://www.sans.org/

http://www.syngress.com/

http://www.bhconsulting.ie/

Reaction


The Future


19

Planning Your CERT


20

Engage With Stakeholders


21

Identify Your Clients


22

Identify Services


23

Establish Your Requirements


24

Identify Tools


25

Get Funding & Support


26

Practise, Practise, Practise


27

Establish the IRT


28

Deliver Your Services


29

Be Prepared


30

Hurdles


31

IRISS Is A WARP


32

What Is A WARP?


http://www.google.ie/imgres?imgurl=http://www.ptraining.com/images/logos/Sharepoint_logo_med.gif&imgrefurl=http://www.ptraining.com/&h=139&w=161&sz=8&tbnid=Bf-JPByx4cVwtM:&tbnh=85&tbnw=98&prev=/images?q=sharepoint+logo&zoom=1&q=sharepoint+logo&hl=en&usg=__4BupybvJoxY9Ut464hvxt-eOzXc=&sa=X&ei=5IuPTNexEMWDswbdurmEDA&ved=0CB0Q9QEwAQ


http://www.aviusexperience.com/fwamarketing.php

33

WARP MSP




34

WARP MSP


35

WARP MSP


36

WARP MSP


37

WARP FWA




Why A WARP?


40

More Resources

ENISA - A step-by-step approach on how to set up a CSIRT http://enisa.europa.eu/cert_guide/downloads/CSIRT_setting_up_guide_ENISA.pdf

CERT-in-a-boxhttp://www.govcert.nl/render.html?it=69

Handbook for CSIRTs (CERT/CC)http://www.cert.org/archive/pdf/csirt-handbook.pdf

Forming an Incident Response Teamhttp://www.auscert.org.au/render.html?it=2252

NIST Computer Security Incident Handling Guidehttp://www.securityunit.com/publications/sp800-61.pdf

CSIRT Starter Kit http://www.terena.org/activities/tf-csirt/starter-kit.htmlTrusted Introducer for CSIRTs in Europehttp://www.ti.terena.nl/

Warning Advice and Warning Point (WARP)http://www.warp.gov.uk/


http://enisa.europa.eu/cert_guide/downloads/CSIRT_setting_up_guide_ENISA.pdf

http://enisa.europa.eu/cert_guide/downloads/CSIRT_setting_up_guide_ENISA.pdf

http://www.govcert.nl/render.html?it=69

http://www.cert.org/archive/pdf/csirt-handbook.pdf

http://www.auscert.org.au/render.html?it=2252

http://www.securityunit.com/publications/sp800-61.pdf

http://www.terena.org/activities/tf-csirt/starter-kit.html

http://www.ti.terena.nl/

http://www.warp.gov.uk/

Questions ?

Http://@iriss.ie Creating A CERT at WARP Speed.

Documents

Transcript of Http://@iriss.ie Creating A CERT at WARP Speed.