TI one month old

29 09 2000 TI one month old Slide 1


TI one month old

Trusted IntroducerStatus report

29 September 2000


TI mission statement

The Trusted Introducer must foster trust and cooperation between CSIRTs in Europe, both new and experienced. The vehicle used to achieve this is to invite CSIRTs to present themselves and describe their service according to an established baseline – thus enabling objectivity, which is regarded as the pre-requisite of trust.


TI process (i)

• The TI registers “known” European teams as Level 0

• Teams that decide to join the TI effort to foster European inter-CSIRT cooperation get invited by the TI to become Level 1

• The Level 1 team then has 3 months to work together with the TI to present their service according to the TI baseline


TI process (ii)

• If they succeed, the team is recognized by the TI as Level 2 and their baseline presentation is published on the TI websites (only partially on the public website)

• Level 2 teams maintain their status by complying with their baseline presentation – or adapting it when due.

• Any non-compliance to the above process results in a fallback to Level 0


TI setup

• M&I/Stelvio (www.stelvio.nl) operates TI service

• TI service manager = Klaus-Peter Kossakowski

• Mark Koek, Don Stikvoort (Stelvio md), …

• Public site: http://www.ti.terena.nl/

http://www.stelvio.nl/

http://www.ti.terena.nl/


TI checks and balances (i)

• TERENA focal point to fund service• TERENA independent, www.terena.nl• TERENA experienced in organisational

setup of Eu services, like RIPE NCC• Initially for 1 year unto September 2001• TI Review Board reviews the TI work and

deals with special cases and problems

http://www.terena.nl/


TI checks and balances (ii)

• TI Review Board consists of representatives of Level 2 teams

• Initially however of well known Eu network/security individuals:– Brian Gilmore, chair– Karel Vietsch, secretary– Andrew Cormack– Christoph Graf– Wilfried Wöber


TI one month old

• Public website www.ti.terena.nl at 1 September 2000, featuring 51 Level 0 teams, and TI process and background information

• CERTA added to Level 0 list• Level 0 info added for IRIS-CERT,

DFN-CERT, DANCERT and CERT-NL• 3 CSIRTs asked to become Level 2

and have been sent draft Invitation Package, including STABLE “Appendix B” to fill out




Appendix B example

%TNA% TEAM NAME *PUB*

#otn# official team name == Brave Elsinore Security Team

#stn# short team name == BEST

#tho# team host organization == {use new lines, one line per hostorg}elsinore.nlelsinore.org

#cot# country of team == {use new lines, one per country}The Netherlands

#doe# date of establishment == 28 September 2000


Ti working on

• Final invitation package• Management invitation &

presentation (the benefits of joining)• Website for Level 2 teams only (SSL)• Server-side certificate for websites• Presentation on RIPE meeting


Discussion items

• IP numbers / domains• You tell us !!


Next time ?

TI one month old

Documents

Transcript of TI one month old