2nd TF-CSIRT Meeting
Programme and Presentations
The 2nd TF-CSIRT seminar and meeting took place at Sala de Juntas, Torre Girona Building, C/ Jordi Girona 1-3 (marked "TG" on the map at http://www.fib.upc.es/bitmaps/cn.jpg) Barcelona on 18 and 19 January 2001.
Thursday, 18 January 2001
Seminar
1. Welcome. Overview of the programme. Logistics announcements. Apologies. Introduction of those present.
Seminar Session 1
Current Practice in CSIRTs -
Organisation, structure, working methods.
-
2. esCERT - Matias Bevilacqua.
3. GARR-CERT - Roberto Cecchini.
4. SI-CERT - Gorazd Bozic.
5. Discussion.
Vendor CSIRTs, security tools, incident handling tools.
-
8. Cisco Product Security Incident Response - Damir Rajnovic.
9. Cisco Security Services, Tools and Support - Michael Behringer.
10. Discussion on TF-CSIRT Clearinghouse for Incident Handling Tools - Yuri Demchenko.
11. Incident tracking with Remedy by Andrew Cormack.
Security Contact Entry in the RIPE Database. Presentation of a proposal and discussion.
-
12. Proposal presentation - Wilfried Wöber . Discussion.
Incident Description and Exchange Format. Update on ongoing work: Data Model, XML DTD, ITDWG Update.
-
13. TF-CSIRT Incident Taxonomy and Description WG work process - Yuri Demchenko.
IODEF/ITDWG and IDEF/IDWG relations. IODEF XML DTD vs IODEF XML Schema.
14. Taxonomy of IODEF related Terminology - Jimmy Arvidsson.
15. ITDWG charter update - Jan Meijer.
Friday, 19 January 2001
2nd TF-CSIRT meeting
1. Welcome and Apologies.
2. Round of Introductions.
3. Minutes of Last Meeting (Paris, 29 September 2000). Status report on actions from last meeting.
4. Trusted Introducer Pilot Service. Update - presentation by Don
Stikvoort and Klaus-Peter Kossakowski.
5. CA for CSIRTs in Europe. Presentation by Don Stikvoort and Christoph Graf. Discussion and next actions.
6. Update on FIRST. FIRST Conference 2001 (Toulouse, 17-22 June 2001). Other FIRST Developments.
7. Training Workshops for New (Staff of) CSIRTs. Presentation by
Andrew Cormack, Claudia Natanson and Jacques Schuurman. Discussion.
8. Relations with CEC. Report on meeting with CEC representatives by Karel Vietsch. Discussion.
9. Results of yesterday's seminar sessions. Summary conclusions and follow-up actions.
10. Other Work Items. Encouraging and Assisting the Establishment of New CSIRTs. Legal Issues and
Relations with Law Enforcement Agencies.
11. Date and Venue of Next Meetings.
12. Any other Business.