On Automation and Orchestration of an Initial Computer Security Incident Response

• Item type: SIG Technical Reports(1)
• 公開日: 2018-02-26
• タイトル: On Automation and Orchestration of an Initial Computer Security Incident Response
• タイトル / 言語: en
• タイトル: On Automation and Orchestration of an Initial Computer Security Incident Response
• 言語: eng
• キーワード / 主題Scheme: Other
• キーワード / 主題: インシデントレスポンスとダークネット
• 資源タイプ / 資源タイプ識別子: http://purl.org/coar/resource_type/c_18gh
• 資源タイプ: technical report
• 著者所属: Tottori University
• 著者所属: Tottori University
• 著者所属: Tottori University
• 著者所属: Tottori University
• 著者所属: Tottori University
• 著者所属(英): en
• 著者所属(英): Tottori University
• 著者所属(英): en
• 著者所属(英): Tottori University
• 著者所属(英): en
• 著者所属(英): Tottori University
• 著者所属(英): en
• 著者所属(英): Tottori University
• 著者所属(英): en
• 著者所属(英): Tottori University
• 著者名: Motoyuki, Ohmori; Masayuki, Higashino; Toshiya, Kawato; Satoshi, Fujio; Takao, Kawamura
• 著者名(英): Motoyuki, Ohmori; Masayuki, Higashino; Toshiya, Kawato; Satoshi, Fujio; Takao, Kawamura
• 論文抄録 / 内容記述タイプ: Other
• 論文抄録 / 内容記述: Computer security has been getting more attentions because a critical computer security incident may cause great damage on an organization such as confidential data breach or malware pandemic. A quick and accurate response against a security incident have been then getting more important. A quick response can reduce not only risk of data breach but also investigating operations. In addition, quickness may enable to contain an incident and prevent malware pandemic. On the other hand, accuracy can avoid unnecessary, excessive and/or wrong operations such as data forensic, re-installing an OS, and isolating an unsuspicious host. In order to realize these quickness and accuracy, this paper discuss to automate and orchestrate an initial incident response against a security incident.
• 論文抄録(英) / 内容記述タイプ: Other
• 論文抄録(英) / 内容記述: Computer security has been getting more attentions because a critical computer security incident may cause great damage on an organization such as confidential data breach or malware pandemic. A quick and accurate response against a security incident have been then getting more important. A quick response can reduce not only risk of data breach but also investigating operations. In addition, quickness may enable to contain an incident and prevent malware pandemic. On the other hand, accuracy can avoid unnecessary, excessive and/or wrong operations such as data forensic, re-installing an OS, and isolating an unsuspicious host. In order to realize these quickness and accuracy, this paper discuss to automate and orchestrate an initial incident response against a security incident.
• 書誌レコードID / 収録物識別子タイプ: NCID
• 書誌レコードID / 収録物識別子: AA12326962
• 書誌情報: 研究報告インターネットと運用技術（IOT）; 巻 2018-IOT-40, 号 29, p. 1-6, 発行日 2018-02-26
• ISSN / 収録物識別子タイプ: ISSN
• ISSN / 収録物識別子: 2188-8787
• Notice: SIG Technical Reports are nonrefereed and hence may later appear in any journals, conferences, symposia, etc.
• 出版者 / 言語: ja
• 出版者: 情報処理学会