Chapter 5. Incident Coordination

Chapter 4, “Dealing with an Attack,” discusses facets to consider when responding to a computer or network security incident. Much of that chapter is devoted to working directly with individuals within your own organization to respond and deal with the incident.

Not all incidents are so simple. In some cases you will find yourself having to contact others external to your organization for assistance in dealing with the issue. If you were being attacked from sources in 15 countries across 5 different continents, where would you start? What if you found that a compromised machine from your site had been used to attack other targets in a number of countries across a number of continents? It often happens that an ...

Get Computer Incident Response and Product Security now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.