3C-CSIRT model a sustainable national CSIRT for afghanistan

Jalal, Islahuddin; Shukur, Zarina; Mokhtar, Mohd Rosmadi

doi:10.1109/iceei.2017.8312405

Cited by 1 publication

(1 citation statement)

References 3 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Killcerce [6] focused on CSIRT's physical location, dependence, and constituency interaction as well as reporting infrastructure and mechanism for internal and external information flow. We analyzed five organizational models for CSIRT, as featured in the study by Killcerce [6], namely the security team model, internal distributed model, centralized model, combination of centralized and distributed model, and coordinated model [14].…”

Section: B Existing Organizational Model Of Csirtmentioning

confidence: 99%

A Model for Afghanistan’s Cyber Security Incident Response Team

Jalal

Yusof

Shukur

et al. 2018

Int. J. Adv. Sci. Eng. Inf. Technol.

Self Cite

View full text Add to dashboard Cite

Persistent cyber threats require effective and efficient mitigation techniques. The cyber security incident response team (CSIRT) is expected to respond to external and internal cyber threats or incidents. Various organizational, national, and international level CSIRTs have been developed for defending and protecting such kinds of threats. Developing countries like Afghanistan have also formed a Computer Emergency Response Team for handling national cyber incidents although it provides limited services to only a few constituencies and depends on funding from foreign donors. Therefore, a new organizational model was proposed to provide guidelines for a specific country, instead of a provision from a constitutional context. Five national CSIRTs were compared to identify their features and characteristics to provide basis for the proposed framework. The study presented the proposed model based on two CSIRT organizational models that incorporated a new funding strategy to achieve a Sustainable National CSIRT for developing countries. Our model combined coordinate and security teams; if consists of constituency's mission, services, resources, organizational framework, and funding strategy. This study employed qualitative method by using document analysis and interview techniques. CSIRT for Afghanistan known as AFCERT was evaluated in terms of structure, services, resources, and funding. AFCERT services level were below the standard of a national CSIRT. Therefore, a more sustainable service need to be provided based on the proposed model components. Findings showed the suitability and potential of the model in controlling and mitigating cyber-attacks, more specifically in the context of Afghanistan.

show abstract

Section: B Existing Organizational Model Of Csirtmentioning

confidence: 99%