Incident Response: A Strategic Guide to Handling System and Network Security Breaches

Incident Response will teach readers what they need to know to set up and improve new or existing incident response efforts. The book provides a comprehensive approach to incident response, covering everything necessary to deal with all phases of incident response effectively--spanning from pre-incident conditions and considerations to the end of an incident. Incident response is hot topic among information security analysts and system administrators. Because it's impossible to completely secure today's systems, networks, and applications, every analyst and administrator is faced with the issue of monitoring and detecting incident response.

Dr. E. Eugene Schultz, founder and former manager of the U.S. Department of Energy's Computer Incident Advisory Capability (CIAC) team, is currently on the support staff of Global Integrity's REACT team¿the first commercial incident response capability.

Russell Shumway is the director of intelligence and response services with Network Security Corporation, which is responsible for the management of NSEC's Incident Mitigation and Open-Source Monitoring services. Russ previously worked as the technical director of Global Integrity Corporation's REACT program, where he worked on numerous computer-security incidents for clients ranging from Fortune 100 companies to private individuals and provided consulting services to 7 of the top 10 financial services companies in the United States and 13 of the top 50 in the world. He assisted in the design and development of Global Integrity's Financial Services Incident Sharing and Advisory Center (FS/ISAC). Dr. Terry Gudaitis is a behavioral scientist/criminologist who has 12 years of experience in research and applied practice in the discipline of behavioral assessment and profiling. She received her MA and Ph.D. from the University of Florida. Since 1987, she has provided domestic and international assessments and profiles for academia, local law enforcement, federal agencies and bureaus, and private industry.

Dr. Gudaitis has worked with the Central Intelligence Agency as a criminal psychologist at the CounterTerrorist Center. Currently, Dr. Gudaitis is responsible for the integration of behavioral/criminal profiling and computer forensics at Global Integrity Corporation, a Science Applications International Corporation (SAIC) subsidiary. Dr. Gudaitis provides consultation, human systems assessment, and profiling services to private industry. Dr. Gudaitis has recently published articles in CyberPsychology and Behavior, Imp Magazine, presented on the "Insider Threat" at SecureComm98, was a guest speaker on "Cyber Crime Profiling" for Leadership America-Greater Washington, and is an active member of the High Technology Crime Investigative Association.