An Overview of STAKCERT Framework in Confronting Worms Attack

摘要：

A procedure is one of the most important elements that should be emphasized when handling any incident related with the cyber world. It is easily forgotten by many organizations, IT administrator and users, especially when dealing with the worms attack. Using the incident response methodology as the basis to build up the STAKCERT framework, the researchers have proposed this novel framework which helps to increase the efficiency in handling worm incident, thus facilitate the process of responding to the worm incident. The STAKCERT framework consists of 2 phases where in phase 1, a novel standard operating procedure in worm detection and analysis have been introduced. In phase 2 of the framework, the worm isolation procedure is inspired by apoptosis. Apoptosis is also known as cell programmed death borrowed from the biology term.

关键词： STAKCERT framework incident response worms attack standard operating procedure

作者: Madihah Mohd Saudi Andrea J Cullen Mike E Woodward Hanifah Abdul Hamid Azni Haslizan Abhalim

作者单位: School of Computing, Informatics and Media, University of Bradford, Bradford, BD7 1DP, United Kingdo School of Computing, Informatics and Media, University of Bradford, Bradford, BD7 1DP, United Kingdo Universiti Sains Islam Malaysia(USIM) Nilai, Malaysia

会议类型: 国际会议

会议名称: 2009 2nd IEEE International Conference on Computer Science and Information Technology(第二届计算机科学与信息技术国际会议 ICCSIT2009)

会议地点: 北京

会议语种:英文

页码: 1420-1424

在线出版日期: 2009-08-08（万方平台首次上网日期，不代表论文的发表时间）