Operations

11/8/2017
03:56 PM
Dark Reading
Dark Reading
Products and Releases
50%
50%

FIRST Announces Incident Response Training for Policymakers

The Forum of Incident Response and Security Teams announces a training session on cyber security incident response for policymakers, policy analysts and government officials.

Nov. 8, 2017 – The Forum of Incident Response and Security Teams (FIRST) today announced it will be organizing a training for policymakers on cyber security incident response, in conjunction with the Internet Governance Forum (IGF) in Geneva, December 18th 2017.

Since 1989, FIRST has organized conferences, trainings and workshops for the technical incident response community, enabling them to share experiences and improve their capability at dealing with major security incidents. With the new course, FIRST will now engage with a new audience, policy analysts working on cyber security, who often have to make decisions that will impact computer security incident response teams (CSIRT).

FIRST Board member Maarten Van Horenbeeck, who coordinates the training, states: “FIRST has historically provided training to its own community, that of technical incident responders and security teams. This is, and will continue to be the focus of our work.

“However, with this new training we will provide the wider context of incident response to policymakers and policy analysts working on cyber security issues. This will support them in making optimal policy decisions, enabling our member teams to be more effective dealing with major cross-border security incidents.

“While for now this is a single event, we will release our materials under a creative commons license, so others in the community can reuse them, and we can maximize their impact.”

The training will cover topics such as how to fit incident response into a national cyber security strategy, the history of CSIRT teams, how they cooperate across international boundaries and most importantly, how these organizations develop trust relationships. In addition, the training will walk through a case study to truly help policy analysts understand how different organizations in the internet community deal with real life major incidents.

The instructors providing the training are Michael Hausding, Serge Droz and Maarten Van Horenbeeck, and the event will take place at the headquarters of the International Telecommunications Union (ITU) in Geneva on Monday, December 18th 2017.

Interested parties can contact the FIRST secretariat via [email protected] with further questions, or sign up for the training at https://www.first.org/events/training/geneva2017/.


About FIRST

Founded in 1990, the Forum of Incident Response and Security Teams (FIRST) consists of internet emergency response teams from more than 360 corporations, government bodies, universities and other institutions across 78 countries in the Americas, Asia, Europe, Africa, and Oceania. It promotes cooperation among computer security incident response teams. For more information, visit: https://www.first.org.

Comment  | 
Print  | 
More Insights
Comments
Oldest First  |  Newest First  |  Threaded View
WebAuthn, FIDO2 Infuse Browsers, Platforms with Strong Authentication
John Fontana, Standards & Identity Analyst, Yubico,  9/19/2018
Turn the NIST Cybersecurity Framework into Reality: 5 Steps
Mukul Kumar & Anupam Sahai, CISO & VP of Cyber Practice and VP Product Management, Cavirin Systems,  9/20/2018
NSS Labs Files Antitrust Suit Against Symantec, CrowdStrike, ESET, AMTSO
Kelly Jackson Higgins, Executive Editor at Dark Reading,  9/19/2018
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: Are you sure this is how we get our data into the cloud?
Current Issue
Flash Poll
The Risk Management Struggle
The Risk Management Struggle
The majority of organizations are struggling to implement a risk-based approach to security even though risk reduction has become the primary metric for measuring the effectiveness of enterprise security strategies. Read the report and get more details today!
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2018-17437
PUBLISHED: 2018-09-24
Memory leak in the H5O_dtype_decode_helper() function in H5Odtype.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service (memory consumption) via a crafted HDF5 file.
CVE-2018-17438
PUBLISHED: 2018-09-24
A SIGFPE signal is raised in the function H5D__select_io() of H5Dselect.c in the HDF HDF5 through 1.10.3 library during an attempted parse of a crafted HDF file, because of incorrect protection against division by zero. It could allow a remote denial of service attack.
CVE-2018-17439
PUBLISHED: 2018-09-24
An issue was discovered in the HDF HDF5 1.10.3 library. There is a stack-based buffer overflow in the function H5S_extent_get_dims() in H5S.c. Specifically, this issue occurs while converting an HDF5 file to a GIF file.
CVE-2018-17432
PUBLISHED: 2018-09-24
A NULL pointer dereference in H5O_sdspace_encode() in H5Osdspace.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service via a crafted HDF5 file.
CVE-2018-17433
PUBLISHED: 2018-09-24
A heap-based buffer overflow in ReadGifImageDesc() in gifread.c in the HDF HDF5 through 1.10.3 library allows attackers to cause a denial of service via a crafted HDF5 file. This issue was triggered while converting a GIF file to an HDF file.