Extended INCident Handling Working Group (INCH) (August 2004)

INCH Agenda

• Administrative
• Draft Review
  • Requirements draft review
  • Data Model draft review
  • Implementation guide draft
  • RID draft review
• Parallel Work
  • IRTF Anti-Spam Research Group (ASRG): Abuse reporting
• New Work
  • Vulnerabilities and Exploits Description Exchange Format (VEDEF)

Charter Review: Goals

• Define a data representation for communication between:
  • a CSIRT and its constituency (e.g., users, customers, trusted reporters) that reports system misuse
  • a CIRST and parties involved in an incident investigation (e.g., attacking site)
  • collaborating CSIRTs sharing information