Embed Size (px)
DESCRIPTION
CERT or CSIRT? CERT – Computer Emergency Response Team CSIRT - Computer Security Incident Response Team
Citation preview
Who is protecting Internet in Latvia ? - CERT initiative
Baiba Kaškina, IMCS UL
Baltic IT&T 2007 - 19 April 2007, Rīga
Outline
• What is CERT?• CERTs in Latvia• CERT initiative in Latvia• Next steps
CERT or CSIRT?
CERT – Computer Emergency Response Team
CSIRT -Computer Security Incident Response Team
How CERT operates?
• RFC-2350: “Expectations for Computer Security Incident Response”
• Organisation, branch, some people• Has “constituency” – IP address range, AS
LATNET CERT
• Established in summer 2006• Part of IMCS UL, LATNET laboratory• Status “listed” in Trusted Introducer• Constituency – LATNET customers – academic, commercial• More info: http://cert.latnet.lv
Mail serversOutgoing SMTP
0
20
40
60
80
100
120
SPAM PASSED Clean PASSEDSpammy
Total
%
Incoming SMTP
0
20
40
60
80
100
120
SPAM PASSED Clean PASSEDSpammy
Total
%
Illegitimate connections (viruses, SPAM)
Illegitimate connections (viruses, SPAM)Argentina 2781Australia 4915Austria 1742Belgium 1609Brazil 6652Bulgaria 1011Canada 5707Chile 1554China 8454CzechRepublic 1984Denmark 1710Egypt 3861France 16103Germany 12327HongKong 1386Hungary 1893India 5956Ireland 1041Israel 7619Italy 4965Japan 4749Korea 8498
Malaysia 1445Mexico 2262Morocco 1170Netherlands 4443Nezinams 10158Norway 1127Peru 1924Philippines 1509Poland 6227Portugal 2309Romania 2744RussianFederation 11894Singapore 1241Spain 6561Sweden 2045Switzerland 2560Taiwan 2244Thailand 2673Turkey 7046Ukraine 1238UnitedArabEmirates 1159UnitedKingdom 13097
>10000 10000-5000 5000-2000 2000-1000
VITA CERT - DDIRV
• Established in 2007• Status – department of VITA• Constituency – governmental institutions• More info: www.ddirv.lv
Why to collaborate?
• Growing number of incidents• Impossible to fight alone• International pressure• No team knows everything
First meeting
• 23 March, 2007• Participants:
Telia, Nordea expressed interest
CERT initiative in Latvia
• Co-ordination of activities – hosted by NIC, IMCS UL• Awareness raising
– Campaigns– Banners– Best practise
• Portal: www.cert.lv– Contact details– Useful information
• Collaboration on incident response• Co-operation with other organisations (LIKTA, Ministries, etc.)
Summary
• We welcome all initiatives!• We are happy to help• We are idealists...
