Computer emergency response team

From Wikipedia, the free encyclopedia
  (Redirected from Csirt)
Jump to: navigation, search

Computer Emergency Response Team is a name given to expert groups that handle computer security incidents. Most groups append the abbreviation CERT or CSIRT to their designation where the latter stands for Computer Security Incident Response Team. For some teams the spelling of CERT refers to Computer Emergency Readiness Team while handling the same tasks.

The name Computer Emergency Response team is the historic designation for the first team at the Carnegie Mellon University. The abbreviation CERT of the historic name was picked up by other teams around the world. In the English-speaking parts of the world some teams took on the more specific name of CSIRT to point out the task of handling security incidents instead of other tech support work.

The history of CERTs is linked to the existence of computer worms. Whenever a new technology arrives, its misuse is not long in following - the first worm in the IBM VNET was covered up. Shortly later a worm hit the Internet on the 3 November 1988, when the so-called Morris Worm paralysed a good percentage of it. This led to the formation of the first Computer Emergency Response Team at Carnegie Mellon University under U.S. Government contract.

With the massive growth in the use of Information and Communications Technologies over the subsequent years, the now-generic term 'CERT'/'CSIRT' refers to an essential part of most large organisations' structures.

Contents

[edit] CERT organizations

[edit] USA

In the USA most CERTs cooperate with the original CERT at the CMU which serves as the nationwide coordination center, which is a major point of contact for corporations such as Apple Inc.[1].

[edit] EU

In the EU most CERTs were created locally by universities and larger IT companies. Most member countries do not have a national coordination center and the teams are cooperating via the paneuropean TF-CSIRT "Task Force - Collaboration Security Incident Response Teams". There were 100 CERT teams accredited at the TF-CSIRT in 2006. The TF-CSIRT runs also the FIRST "Forum of Incident Response and Security Teams" being the global coordination center for CERTs around the world. The EU-centric CERT governance is passed gradually to the ENISA agency.

[edit] Other countries

[edit] See also

[edit] References

  1. ^ "Security". apple.com. http://www.apple.com/macosx/security/. "Apple cooperates closely with organizations such as the Computer Emergency Response Team Coordination Center (CERT/CC)" 
  2. ^ "About US" TechCERT

[edit] External links

Personal tools
Namespaces
Variants
Actions
Navigation
Interaction
Toolbox
Print/export
Languages