国际信息安全技术标准发展(英文版).pptx

1、WG1 ISMS StandardsChair Ted HumphreysVice-Chair Angelika PlateWG4 Security Controls&ServicesChair Meng-Chow KangWG2Security TechniquesChair Prof.K NaemuraWG3Security EvaluationChair Mats OhlinWG5Privacy Technology,ID management and BiometricsChair Kai RannenbergUnknown and emerging security issuesKn

2、own security issuesSecurity breaches and compromisesIncludes ISO/IEC 24762,Vulnerability Mgmt,IDS,&Incident Response related standardsAnti-Spyware,Anti-SPAM,Anti-Phishing,Cybersecurity-event coordination&information sharingISO 18028 revision;WD for new Part 1,2&3;New Study Period on Home Network Sec

3、urity1st WD available for commentsFuture NPNew Study Period proposed;Includes outsourcing and off-shoring securityProtectDetectReact/ResponseIT Security PlanningActivateBCPActivate DCRPPlanPrepare&TestPlanPrepare&TestBusiness Continuity PlanningDisaster Contingency&Recovery PlanningDisasterEventsIT

4、SystemsFailuresOperational StatusTimeIncidentCurrent IHM,BCM and DRP focus on shortening period of disruption and reducing the impact of an incident by risk mitigation and recovery planning.T=0T=iT=kT=lT=j100%x%y%z%Early detection and response capabilities to prevent sudden and drastic failure,enabl

5、e gradual deterioration of operational status and further shorten recovery time.Before implementation of IHM,BCM,and/or DRPAfter implementation of IHM,BCM,and/or DRPAfter implementation of ICT Readiness for BCSplogs,SPAM,Search Engine PoisoningSpywareTrojansVirus/WormsSPAMExploit URLsPhishingTrojansPrivacy&Information BreachPrevalence of Malicious Software by Category