Incident Response: A Strategic Guide to Handling System and Network Security Breaches

Copyright ‚ 2002 by New Riders Publishing

FIRST EDITION: November, 2001

All rights reserved. No part of this book may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopying, recording, or by any information storage and retrieval system, without written permission from the publisher, except for the inclusion of brief quotations in a review.

Library of Congress Catalog Card Number: 20-01087072

06 05 04 03 02 7 6 5 4 3 2 1

Interpretation of the printing code: The rightmost double-digit number is the year of the book's printing; the rightmost single-digit number is the number of the book's printing. For example, the printing code 02-1 shows that the first printing of the book occurred in 2002.

Printed in the United States of America

Trademarks

All terms mentioned in this book that are known to be trademarks or service marks have been appropriately capital-ized. New Riders Publishing cannot attest to the accuracy of this information. Use of a term in this book should not be regarded as affecting the validity of any trademark or service mark.

Warning and Disclaimer

This book is designed to provide information about Internet security. Every effort has been made to make this book as complete and as accurate as possible, but no warranty or fitness is implied .

The information is provided on an as-is basis. The authors and New Riders Publishing shall have neither liability nor responsibility to any person or entity with respect to any loss or damages arising from the information contained in this book or from the use of the discs or programs that may accompany it.

Credits

Publisher

David Dwyer

Associate Publisher

Stephanie Wall

Production Manager

Gina Kanouse

Managing Editor

Kristy Knoop

Sr. Acquisitions Editor

Jeff Riley

Product Marketing Manager

Stephanie Layton

Publicity Manager

Susan Nixon

Project Editor

Elise Walter

Copy Editor

Amy Lepore

Indexer

Cheryl Lenser

Manufacturing Coordinator

Jim Conway

Book Designer

Louisa Klucznik

Cover Designer

Brainstorm Design, Inc.

Cover Production

Aren Howell

Composition

Scan Communications Group, Inc.

Dedication

The part of this book that I wrote is dedicated to the original Computer Incident Advisory Capability (CIAC) team mem-bers: Tom Longstaff, Ana Maria de Alvare, David S. Brown, and Russell Brand. These outstanding individuals worked with me, the original CIAC team manager, to overcome many obstacles, both from the outside and from within. They deserve the credit for any success that the original CIAC team enjoyed.

E. Eugene Schultz

The part of this book that I am responsible for is dedicated to my wife, Amy McBurnie, for all her encouragement throughout my career.

Russell Shumway