On Automation and Orchestration of an Initial Computer Security Incident Response Using Centralized Incident Tracking System

• Item type: Symposium(1)
• 公開日: 2018-10-15
• タイトル: On Automation and Orchestration of an Initial Computer Security Incident Response Using Centralized Incident Tracking System
• タイトル / 言語: en
• タイトル: On Automation and Orchestration of an Initial Computer Security Incident Response Using Centralized Incident Tracking System
• 言語: eng
• キーワード / 主題Scheme: Other
• キーワード / 主題: Computer Security Incident Response，Network Operation，CSIRT，automation and orchestration
• 資源タイプ / 資源タイプ識別子: http://purl.org/coar/resource_type/c_5794
• 資源タイプ: conference paper
• 著者所属: 鳥取大学
• 著者所属: 鳥取大学
• 著者所属: 鳥取大学
• 著者所属: 鳥取大学
• 著者所属: 鳥取大学
• 著者所属: 鳥取大学
• 著者所属(英): en
• 著者所属(英): Tottori University
• 著者所属(英): en
• 著者所属(英): Tottori University
• 著者所属(英): en
• 著者所属(英): Tottori University
• 著者所属(英): en
• 著者所属(英): Tottori University
• 著者所属(英): en
• 著者所属(英): Tottori University
• 著者所属(英): en
• 著者所属(英): Tottori University
• 著者名: 大森, 幹之; 東野, 正幸; 川戸, 聡也; 宮田, 直輝; 高橋, 健一; 川村, 尚生
• 著者名(英): Motoyuki, Ohmori; Masayuki, Higashino; Toshiya, Kawato; Naoki, Miyata; Kenichi, Takahashi; Takao, Kawamura
• 論文抄録 / 内容記述タイプ: Other
• 論文抄録 / 内容記述: A critical computer security incident may cause great damage on an organization such as confidential data breach or malware pandemic.In order to avoid or mitigate such damage, a quick and accurate response against a computer security incident has been then getting more important.In order to realize these quickness and accuracy, this paper presents the Incident Tracking System (ITS) that orchestrates several information systems and automate an initial incident response.The ITS automatically locates and isolates a suspicious host, and sends a mail notification to a person in charge of handling an incident.The ITS can also identify or suggest a user of the suspicious host by network or other service authentication logs.
• 論文抄録(英) / 内容記述タイプ: Other
• 論文抄録(英) / 内容記述: A critical computer security incident may cause great damage on an organization such as confidential data breach or malware pandemic.In order to avoid or mitigate such damage, a quick and accurate response against a computer security incident has been then getting more important.In order to realize these quickness and accuracy, this paper presents the Incident Tracking System (ITS) that orchestrates several information systems and automate an initial incident response.The ITS automatically locates and isolates a suspicious host, and sends a mail notification to a person in charge of handling an incident.The ITS can also identify or suggest a user of the suspicious host by network or other service authentication logs.
• 書誌レコードID / 識別子タイプ: NCID
• 書誌レコードID / 関連識別子: ISSN 1882-0840
• 書誌情報: コンピュータセキュリティシンポジウム2018論文集; 巻 2018, 号 2, p. 1178-1185
• 出版者 / 言語: ja
• 出版者: 情報処理学会