Cisco and CSIRT
Oct 9th, 2010 by palimarrao
Computer Security Incident Response Team (CSIRT) is a unit that addresses computer security issues. They help addresses issues like unauthorized access to a company’s database without the owner’s knowledge.
CISCO uses the CSIRT to promote both the company’s and the customers’ safety. Network based IPS is used by CISCO to find out internal security issues before the customers are affected by them. CISCO, like many other huge companies, receives millions of attacks from the internet. In such cases, it is important for the company to not only single out those attacks which are actually dangerous, but also to know the location of important assests of the company. CISCO has a very comprehensive step by step plan in dealing with harmful threats like Code Red. In such a case, it isn’t possible for the company to set up an IPS and forget. It is necessary to continually tune it so as to make it more valuable to the company. Many innovations are continually added like signatures to http sites to prevent the information from leaving the company.
According to CISCO, in developing a information system, attention must be paid to both the people and technology.
url: http://www.cisco.com/web/about/ciscoitatwork/downloads/ciscoitatwork/pdf/CSIRT_Network-Based_Intrusion_Prevention_System_Case_Study.pdf