Paper Abstract and Keywords |
Presentation |
2019-03-08 14:50
A Trouble Ticket System Specialized for Incident Response Yu Tsuda, Takashi Tomine (NICT), Masato Jingu (NICT/HISYS), Keisuke Iwasaki (NTT-AT), Kenjiro Terada, Daisuke Inoue (NICT) ICSS2018-92 |
Abstract |
(in Japanese) |
(See Japanese page) |
(in English) |
In case that an organization has damaged by a cyberattack, it is crucial to minimize the damage by rapid security incident response. On the other hand, a trouble ticket system is typically leveraged for managing a business control (e.g. issue tracking for software development, troubleshooting on networks, etc). In this paper, we present a trouble ticket system, which enables us to rapidly respond to security incidents and to accumulate
knowledge of security incident response. Our system can visualize current progress status of each security incident response and real-time chatting messages among security operators. Our system also finds similar incidents on own networks from past security incident responses. In addition, security operators can see configuration on networks and cyber threat intelligences. Hereby our system encourages security operators to start rapid triage for security incidents. At the last part of this paper, we deploy the system on our network, then we discuss the system as case study. |
Keyword |
(in Japanese) |
(See Japanese page) |
(in English) |
trouble ticket system / security incident response / security operation / / / / / |
Reference Info. |
IEICE Tech. Rep., vol. 118, no. 486, ICSS2018-92, pp. 197-202, March 2019. |
Paper # |
ICSS2018-92 |
Date of Issue |
2019-02-28 (ICSS) |
ISSN |
Online edition: ISSN 2432-6380 |
Copyright and reproduction |
All rights are reserved and no part of this publication may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopy, recording, or any information storage and retrieval system, without permission in writing from the publisher. Notwithstanding, instructors are permitted to photocopy isolated articles for noncommercial classroom use without fee. (License No.: 10GA0019/12GB0052/13GB0056/17GB0034/18GB0034) |
Download PDF |
ICSS2018-92 |
|