The Methodology for Managing the Abuse of IT Systems
Mirosław Ryba, Aleksander Poniewierski, Józef Sulwiński, Mateusz Górnisiewicz · Information Security Journal A Global Perspective · 2009
This paper focuses on the processes of dealing with security breaches, which are becoming one of the most pressing problems in every organization whose systems are connected to the World–Wide Web. The study presents the most widely used methodologies designed in order to detect and react to security violations in a systematic and efficient way. Based on the presented methodologies, announced and supported by such credible organizations as SANS, NIST, CERT®, and ISO, the authors present their own methodology, which takes into account selected aspects of these methodologies, with the purpose of establishing a systematic and coherent approach to the process of detecting and reacting to abuses in IT systems.