Logo of the European Computer Security Incident Response Team Network (eCSIRT.net)

eCSIRT.net Project Plan

     
eCSIRT.net > Project  
 

Project Outline

The project will continue until December 2003. The workplan is divided into 4 technical workpackages, WP 2 to 5, which are discussed in more detail below. Three accompanying workpackages, WP 1, 6 and 7, are addressing the following issues:

 

Preparation Phase (WP2)

Workpackage 2: Preparation Phase ("defining a common language") addresses the specification, adaptation and integration of available techniques, and the development of a necessary common framework, to enable and facilitate the further work.

The expected results from this phase are:

The preparation phase is scheduled until early 2003 and will be followed by its exploitation. This means, that the results of the preparation are actually used within the production environment of the partners.

 

Usage Phase (WP3)

Workpackage 3 : Usage Phase ("using the common language between partners") is based on the established common framework of WP 2 and covers the actual usage of identified solutions by the partners.

The expected results from this phase are:

 

Clearinghouse Function (WP4)

Workpackage 4 : Clearinghouse Function ("gathering incident statistics from partners using the common language") addresses the established common framework of WP 2 to collect incident statistics from the partners and serve these in an integrated fashion to the partners, and - in a generalized way - to a wider audience. Suitable international contacts can contribute to and benefit from this scheme if they adopt the developed common framework.

The expected results from this phase are:

 

Alert Function (WP5)

Workpackage 5 : Alert Function ("gathering incident data from partners to derive early warnings and emergency alerts from, and spread these to partners securely") addresses the established common framework to collect incident data from the partners and then deploy techniques to intelligently combine these to yield early warning information, in the form of warnings or emergency alerts to the partners. For the spreading of warnings and alerts suitable techniques will be adopted, in-band (using the Internet) or out-of-band - in the latter case leaning on infrastructures available or developed elsewhere.

Suitable international contacts can contribute to and benefit from this scheme if they adopt the developed common framework. This is especially true for international bodies that can provide information for the alert function outside European business hours.

The expected results from this phase are:

 

eCSIRT.net > Project  
     
eCSIRT.net eCSIRT.net
The European Computer Security Incident Response Team Network
News | Sitemap | Impress | Contact | Top
Last changed: December 30, 2003 / AL
Copyright © 2002-2003 by PRESECURE Consulting GmbH, Germany
Signed with PGP!This page is digitally signed with PGP! eCSIRT.net