Alert bulletin

1
ISACs
CSIRT
ISP
CSIRTs
CSIRT
IT vendors
CSIRT
Network
Law
enforcement
Info brokers
Info brokers


Specialised
services
Specialised
services
Civil protection /
Emergency Mgmt
Industry groups
Consumer
protection org.
Alert bulletin
Alert bulletin
Threat / risk assessment
Threat / risk assessment
Incident / vulnerabilities reporting
Incident / vulnerabilities reporting
Evidence / forensics
Evidence / forensics
2
ISACs
ISP
CSIRT
CSIRTs
CSIRT
IT vendors
CSIRT
EC
?
Network
Law
MS
enforcement
Info brokers
Info brokers
?


Specialised
services
Specialised
services
Civil protection /
Emergency Mgmt
Industry groups
Consumer
protection org.
Citizen
3
Information
4
ACTORS (Sources of data)
5
No report
trends
Initial Analysis
Distribution
Anonymise
Incidents
Raw data Log files
Unsanitised (eg.Law enforcement) (voluntary)
Voluntary (user decides)
6
EWIS Centre??
Distribution
Analysis
CSIRT
Translation?
Facilitation
Experts
Vendors
Policy
Gov.
7

• Current issues
• Centralisation
• - translation
• - Reporting
• Warning
• Analysis
• Funding
• Standardisation
• Harmonisation
• Scope of EWIS
• Authority of EWIS
• Liability of EWIS