Study on the Architecture of Computer Emergency Response System
Yi Lian · 2004
Emergency Response is regarded as the key problem of dynamic security of computer and network systems. In this paper, we propose the architecture of Computer Emergency Response System based on hierarchical model, including security service layer, system module layer and security research layer. Explicit definitions of functional requirements, module partitions and corresponding technical supports of this architecture are given. Several concerned items, such as Incident Response, Security Surveillance, Intrusion Traceback, Disaster Recovery, and other relevant security services (Security Consultation, Security Bulletin and Security Analysis), are also discussed in detail.