论文信息 - Towards a CERT-Communication Model as Basis to Software Assurance

Towards a CERT-Communication Model as Basis to Software Assurance

This paper describes an approach towards modelling the communication in and between CERTs, of CERTs with their constituents, and of CERTs with other stakeholders and partners. As achieving their sometimes diverging goals is essential for CERTs, an extended goal-scenario model is suggested.

[1] Nevil Brownlee,et al. Expectations for Computer Security Incident Response , 1998, RFC.

[2] Colette Rolland,et al. Guiding Goal Modeling Using Scenarios , 1998, IEEE Trans. Software Eng..

[3] Colette Rolland,et al. Meta-modelling for cooperative processes , 1999 .

[4] D. Gilbert. Vertrauen als Gegenstand der ökonomischen Theorie , 2007 .

[5] E. Brunner,et al. International CIIP Handbook 2008/2009: An Inventory of 25 National and 7 International Critical Information Infrastructure Protection Policies , 2008 .

[6] John McHugh,et al. An Anthropological Approach to Studying CSIRTs , 2014, IEEE Security & Privacy.

[7] Reeshad S. Dalal,et al. An Organizational Psychology Perspective to Examining Computer Security Incident Response Teams , 2014, IEEE Security & Privacy.

[8] E. Huber,et al. Wissensmanagement und Kommunikation bei CERTs , 2015 .

[9] Radosław Żuber. Actionable Information for Security Incident Response , 2015 .