<?xml version="1.0" encoding="utf-8" ?>
<rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:syn="http://purl.org/rss/1.0/modules/syndication/" xmlns="http://purl.org/rss/1.0/">




    



<channel rdf:about="http://www.enisa.europa.eu/activities/cert/whats-new/latest/RSS">
  <title>What's new</title>
  <link>http://www.enisa.europa.eu</link>

  <description>
    
      This page contains recent additions or changes to the CERT pages
    
  </description>

  

  
            <syn:updatePeriod>daily</syn:updatePeriod>
            <syn:updateFrequency>1</syn:updateFrequency>
            <syn:updateBase>2010-01-26T12:27:46Z</syn:updateBase>
        

  <image rdf:resource="http://www.enisa.europa.eu/logo.png"/>

  <items>
    <rdf:Seq>
      
        <rdf:li rdf:resource="http://www.enisa.europa.eu/activities/cert/security-month/events"/>
      
      
        <rdf:li rdf:resource="http://www.enisa.europa.eu/activities/cert/support/exercise/images-for-CERT-exercises"/>
      
      
        <rdf:li rdf:resource="http://www.enisa.europa.eu/activities/cert/events/transits-training"/>
      
      
        <rdf:li rdf:resource="http://www.enisa.europa.eu/activities/cert/events/7th-cert-workshop"/>
      
      
        <rdf:li rdf:resource="http://www.enisa.europa.eu/activities/cert/support/supporting-fight-against-cybercrime/cooperation-between-certs-and-law-enforcement-agencies-in-the-fight-against-cybercrime-a-first-collection-of-practices"/>
      
      
        <rdf:li rdf:resource="http://www.enisa.europa.eu/activities/cert/background/inv/cert-eu/cert-eu"/>
      
    </rdf:Seq>
  </items>

</channel>


  <item rdf:about="http://www.enisa.europa.eu/activities/cert/security-month/events">
    <title>Events</title>
    <link>http://www.enisa.europa.eu/activities/cert/security-month/events</link>
    <description>Read more about events and initiatives organised to establish a reinforcing momentum in awareness raising and dissemination effort on topics pertaining to information security</description>
    <content:encoded xmlns:content="http://purl.org/rss/1.0/modules/content/"><![CDATA[<h3>Conference on the role of intermediaries</h3>
<blockquote class="pullquote">12 June 2012 - Brussels, Belgium</blockquote>
<p>The event is organised by the European Commission in co-operation<br />with the European Network and Information Security Agency and the United States Department of Homeland Security. The overall objective of the event is to bring intermediaries together in order to establish a reinforcing momentum in awareness raising and dissemination effort on topics pertaining to information security.</p>
<p>More information about the event will be available soon.</p>]]></content:encoded>
    <dc:publisher>No publisher</dc:publisher>
    <dc:creator>Ioanna Kampouraki</dc:creator>
    <dc:rights></dc:rights>
    
      <dc:subject>Education: ENISA Events</dc:subject>
    
    <dc:date>2012-04-23T08:05:00Z</dc:date>
    <dc:type>Page</dc:type>
  </item>


  <item rdf:about="http://www.enisa.europa.eu/activities/cert/support/exercise/images-for-CERT-exercises">
    <title>Images for CERT exercises</title>
    <link>http://www.enisa.europa.eu/activities/cert/support/exercise/images-for-CERT-exercises</link>
    <description>This page contains links to the ISO and virtual images that accompany the CERT exercise material.</description>
    <content:encoded xmlns:content="http://purl.org/rss/1.0/modules/content/"><![CDATA[<h3>Diclaimer:</h3>
<pre><br />By downloading the images you acknowledge the following:<br /><br />Notice must be taken that this publication represents the views and interpretations of the authors and editors, unless stated otherwise. This publication should not be construed to be an action of ENISA or the ENISA bodies unless adopted pursuant to the ENISA Regulation (EC) No 460/2004. This publication does not necessarily represent state-of the-art and it might be updated from time to time. Third-party sources are quoted as appropriate. ENISA is not responsible for the content of the external sources including external websites referenced in this publication. This publication is intended for educational and information purposes only. Neither ENISA nor any person acting on its behalf is responsible for the use that might be made of the information contained in this publication. Reproduction is authorised provided the source is acknowledged.<br /><br />© European Network and Information Security Agency (ENISA), 2009</pre>
<p></p>
<p><strong>Instructions how to use virtual images</strong> -&gt; <a class="internal-link" href="files/How_to_use_CERT_Exercises_virtual_images.pdf" target="_blank" title="How to use CERT Exercise virtual images"><img align="bottom" alt="en" height="16" src="../../background/inv/certs-by-country/++resource++country-flags/gb.gif" width="18" /></a></p>
<p><b>NOTE: Internet Explorer renames files with .ova extension to .tar. You will need to change the extension back before loading them into virtualisation environment.</b></p>
<h2>Download</h2>
<p><strong>ISO image CSIRT Exercise Handbook:</strong></p>
<table>
<tbody>
<tr><th colspan="1" rowspan="2">
<p><a class="external-link" href="http://www.enisa.europa.eu/ftp/ENISA_CERT_Exercises_Handbook.iso">Download</a></p>
</th><th>
<p><a class="internal-link" href="files/handbook-md5" title="Handbook MD5">MD5</a> hash sum</p>
</th><th>
<p><a class="internal-link" href="files/handbook-md5-pgp-signature" title="Handbook MD5 PGP signature">PGP</a> signature</p>
</th></tr>
<tr>
<td>
<p><strong><a class="internal-link" href="files/handbook-sha1" title="Handbook SHA1">SHA1</a> hash sum</strong></p>
</td>
<td>
<p><strong><a class="internal-link" href="files/handbook-sha1-pgp-signature" title="Handbook SHA1 PGP signature">PGP</a> signature</strong></p>
</td>
</tr>
</tbody>
</table>
<p><strong>Virtual image CSIRT Exercise Handbook:</strong></p>
<table border="0">
<tbody>
<tr><th>
<p><a class="external-link" href="http://www.enisa.europa.eu/ftp/ENISA_CERT_Exercises_Handbook.ova">Download</a></p>
</th><th>
<p><a href="http://enisa.europa.eu/ftp/handookvirtual-md5" target="_blank" title="Handbook MD5">MD5</a> hash sum</p>
</th></tr>
</tbody>
</table>
<p></p>
<p><strong>ISO image CSIRT Exercise Toolset:</strong></p>
<table>
<tbody>
<tr><th colspan="1" rowspan="2">
<p><a class="external-link" href="http://www.enisa.europa.eu/ftp/ENISA_CERT_Exercises_Toolset.iso">Download</a></p>
</th><th>
<p><a class="internal-link" href="files/toolset-md5" title="Toolset MD5">MD5</a> hash sum</p>
</th><th>
<p><a class="internal-link" href="files/toolset-md5-pgp-signature" title="Toolset MD5 PGP signature">PGP</a> signature</p>
</th></tr>
<tr>
<td>
<p><strong><a class="internal-link" href="files/toolset-sha1" title="Toolset SHA1">SHA1</a> hash sum</strong></p>
</td>
<td>
<p><strong><a class="internal-link" href="files/toolset-sha1-pgp-signature" title="Toolset SHA1 PGP signature">PGP</a> signature</strong></p>
</td>
</tr>
</tbody>
</table>
<p><strong>Virtual image CSIRT Exercise Toolset:</strong></p>
<table border="0">
<tbody>
<tr><th>
<p><a href="http://www.enisa.europa.eu/ftp/ENISA_CERT_Exercises_Toolset.ova">Download</a></p>
</th><th>
<p><a href="http://enisa.europa.eu/ftp/toolsetvirtual-md5" target="_blank" title="Toolset MD5">MD5</a> hash sum</p>
</th></tr>
</tbody>
</table>
<p></p>
<p><strong>ISO image CSIRT Exercise Netflow:</strong></p>
<table>
<tbody>
<tr><th colspan="1" rowspan="2">
<p><a class="external-link" href="http://www.enisa.europa.eu/ftp/ENISA_CERT_Exercises_Netflow.iso">Download</a></p>
</th><th>
<p><a class="internal-link" href="files/netflow-md5" title="Netflow MD5">MD5</a> hash sum</p>
</th><th>
<p><a class="internal-link" href="files/toolset-md5-pgp-signature" title="Toolset MD5 PGP signature">PGP</a> signature</p>
</th></tr>
<tr>
<td>
<p><strong><a class="internal-link" href="files/netflow-sha1" title="Netflow SHA1">SHA1</a> hash sum</strong></p>
</td>
<td>
<p><strong><a class="internal-link" href="files/netflow-sha1-pgp-signature" title="Netflow SHA1 PGP signature">PGP</a> signature</strong></p>
</td>
</tr>
</tbody>
</table>
<p><strong>Virtual image CSIRT Exercise Netflow:</strong></p>
<table border="0">
<tbody>
<tr><th>
<p><a href="http://www.enisa.europa.eu/ftp/ENISA_CERT_Exercises_Netflow.ova">Download</a></p>
</th><th>
<p><a href="http://enisa.europa.eu/ftp/netflowvirtual-md5" target="_blank" title="Netflow MD5">MD5</a> hash sum</p>
</th></tr>
</tbody>
</table>
<p></p>
<p>The hash files are signed with PGP. The key, key id and fingerprint can be found <a class="internal-link" href="../../contact/marco-thorbruegge" title="Marco Thorbruegge">here</a>.</p>]]></content:encoded>
    <dc:publisher>No publisher</dc:publisher>
    <dc:creator>Lauri Palkmets</dc:creator>
    <dc:rights></dc:rights>
    
      <dc:subject>Security Services: Technology Consulting / Business: CERT</dc:subject>
    
    
      <dc:subject>Security Services: Technology Consulting / Business: CERT News</dc:subject>
    
    
      <dc:subject>Security Services: Technology Consulting / Business: How-To</dc:subject>
    
    
      <dc:subject>Security Services: Technology Consulting / Business: Exercises</dc:subject>
    
    
      <dc:subject>Security Services: Technology Consulting / Business: Good Practice</dc:subject>
    
    <dc:date>2012-04-19T11:05:00Z</dc:date>
    <dc:type>Page</dc:type>
  </item>


  <item rdf:about="http://www.enisa.europa.eu/activities/cert/events/transits-training">
    <title>TRANSITS training</title>
    <link>http://www.enisa.europa.eu/activities/cert/events/transits-training</link>
    <description>Here you will find information about TRANSITS training.</description>
    <content:encoded xmlns:content="http://purl.org/rss/1.0/modules/content/"><![CDATA[<p><b><img class="image-inline" height="74" src="../files/transitslogowebsml.png" style="float: right; " width="65" /></b></p>
<p><br /><br /><br /></p>
<p></p>
<h2><b>TRANSITS training</b></h2>
<p style="text-align: justify; ">TRANSITS evolved out of a European Commission funded project (<span class="link-external"><a href="http://www.ist-transits.org/" target="_blank">IST-2001-39118</a></span>, 1 July 2002 - 30 September 2005) to promote the establishment of CSIRTs by addressing the shortage of skilled staff. The seven training workshops organised by the project proved so successful that TERENA continued to run them after the project finished in September 2005. These have been run with financial support from <span class="link-external"><a href="http://www.enisa.europa.eu/" target="_blank">ENISA</a></span>, <span class="link-external"><a href="http://www.first.org/" target="_blank">FIRST</a></span> and various other organisations, whilst the course material has also been utilised for other workshops all around the world.</p>
<p style="text-align: justify; "><strong>ENISA</strong> is supporting the successful <strong>TRANSITS</strong> program for <strong>CSIRT staff</strong> members taking place at least twice a year in Europe. The TRANSITS program consists of basic and advanced (hands on) courses.</p>
<h3>TRANSITS-I</h3>
<p style="text-align: justify; ">The TRANSITS-I course is aimed at new or potential CSIRT personnel who wish to gain a good grounding in the main aspects of working in an incident handling and response team. Over the years, operatives have been trained for commercial, governmental, military and national CSIRTs, as well as those in the research and education sector.</p>
<p><span class="link-external"><a href="http://www.terena.org/activities/transits/transits-i/" target="_blank">More information about TRANSITS-I</a></span></p>
<h3>TRANSITS II</h3>
<p style="text-align: justify; ">The TRANSITS-II course is aimed at more experienced personnel working for established CSIRTs. It provides an in-depth study of key areas in incident handling and response operations, training in how to improve communications with constituents, along with practical exercises.</p>
<p><span class="link-external"><a href="http://www.terena.org/activities/transits/transits-ii/" target="_blank">More information about TRANSITS-II</a></span></p>]]></content:encoded>
    <dc:publisher>No publisher</dc:publisher>
    <dc:creator>Lauri Palkmets</dc:creator>
    <dc:rights></dc:rights>
    
      <dc:subject>Security Services: Technology Consulting / Business: CERT</dc:subject>
    
    
      <dc:subject>Education: ENISA Events</dc:subject>
    
    
      <dc:subject>Education: Training</dc:subject>
    
    <dc:date>2012-04-18T07:45:00Z</dc:date>
    <dc:type>Page</dc:type>
  </item>


  <item rdf:about="http://www.enisa.europa.eu/activities/cert/events/7th-cert-workshop">
    <title>7th CERT workshop</title>
    <link>http://www.enisa.europa.eu/activities/cert/events/7th-cert-workshop</link>
    <description>This year our 7th annual CERT workshop will focus on hands-on technical training for national/governamental CERT teams.</description>
    <content:encoded xmlns:content="http://purl.org/rss/1.0/modules/content/"><![CDATA[<p style="color: rgb(255, 255, 255); ">______________________________________________________</p>
<p align="justify" style="text-align: left; ">We are happy to inform you that this year our 7th annual CERT workshop will focus on hands-on training exclusively for the EU national/governamental CERT teams, free of charge and by invitation only.<strong></strong></p>
<p style="text-align: left; "><strong>ENISA,</strong> supported by the well known Internet security research firm <strong>Team Cymru</strong><strong></strong>, will offer 2 days of deep technical dive into topics like botnets,  mobile malware and other interesting topics.</p>
<p style="text-align: left; ">The workshop will be hosted by <strong>University of Malta.</strong></p>
<h2>Agenda (tentative)</h2>
<h3>1st day (14 June 2012)</h3>
<table class="plain">
<tbody>
<tr>
<td>08:30 - 09:00</td>
<td>Registration of participants</td>
</tr>
<tr>
<td>09:00 - 09:15</td>
<td>Opening ENISA</td>
</tr>
<tr>
<td>09:15 - 10:45</td>
<td>Nat/Gov CERTs discussion</td>
</tr>
<tr>
<td>10:45 - 11:00</td>
<td>Coffee break</td>
</tr>
<tr>
<td>11:00 - 12:30</td>
<td>Understanding botnets &amp; botnet operations part 1</td>
</tr>
<tr>
<td>12:30 - 13:30</td>
<td>Lunch break</td>
</tr>
<tr>
<td>13:30 - 15:00</td>
<td>Understanding botnets &amp; botnet operations part 2</td>
</tr>
<tr>
<td>15:00 - 15:15</td>
<td>Coffee break</td>
</tr>
<tr>
<td>15:00 - 18:15</td>
<td>Network monitoring &amp; Netflow analysis</td>
</tr>
</tbody>
</table>
<p></p>
<h3>2nd day (15 June 2012)</h3>
<table class="plain">
<tbody>
<tr>
<td>09:00 - 10:30</td>
<td>Investigating malware infections part 1</td>
</tr>
<tr>
<td>10:30 - 10:45</td>
<td>Coffee break</td>
</tr>
<tr>
<td>10:45 - 12:15</td>
<td>Investigating malware infections part 2</td>
</tr>
<tr>
<td>12:15 - 13:15</td>
<td>Lunch break</td>
</tr>
<tr>
<td>13:15 - 14:45</td>
<td>DNS for investigators</td>
</tr>
<tr>
<td>14:45 - 16:00</td>
<td>Coffee break</td>
</tr>
<tr>
<td>16:00 - 17:30</td>
<td>Attack mitigation</td>
</tr>
<tr>
<td>17:30 - 18:00</td>
<td>Security for 1$ a day - Team Cymru Data Feeds</td>
</tr>
<tr>
<td>18:00 - 18:10</td>
<td>Closing remarks (ENISA and Team Cymru)</td>
</tr>
</tbody>
</table>
<p><img class="image-inline" height="179" src="../files/ENISA_LOGO_new_small.jpg" width="288" /></p>
<p><img class="image-inline" src="../files/team-cumru" /></p>
<p><img class="image-inline" src="../files/Malta_University_logo__lower_small.jpg" /></p>]]></content:encoded>
    <dc:publisher>No publisher</dc:publisher>
    <dc:creator>Cosmin Ciobanu</dc:creator>
    <dc:rights></dc:rights>
    
      <dc:subject>Security Services: Technology Consulting / Business: CERT</dc:subject>
    
    
      <dc:subject>Security Services: Technology Consulting / Business: CERT News</dc:subject>
    
    
      <dc:subject>Education: ENISA Events</dc:subject>
    
    <dc:date>2012-03-12T13:45:00Z</dc:date>
    <dc:type>Event</dc:type>
  </item>


  <item rdf:about="http://www.enisa.europa.eu/activities/cert/support/supporting-fight-against-cybercrime/cooperation-between-certs-and-law-enforcement-agencies-in-the-fight-against-cybercrime-a-first-collection-of-practices">
    <title>Cooperation between CERTs and Law Enforcement Agencies in the fight against cybercrime - A first collection of practices</title>
    <link>http://www.enisa.europa.eu/activities/cert/support/supporting-fight-against-cybercrime/cooperation-between-certs-and-law-enforcement-agencies-in-the-fight-against-cybercrime-a-first-collection-of-practices</link>
    <description>The essential aim of this report is to improve the capability of CERTs, with a focus on the national/governmental CERTs (n/g CERTs), to address the network and information security (NIS) aspects of cybercrime. It focuses particularly on supporting n/g CERTs and their hosting organisations in the European Union (EU) Member States in their collaboration with the LEAs. It also intends to be a first collection of practices collected from mature CERTs in Europe, including among other things workflows and collaboration with other key players, in particular different law enforcement authorities, in the fight against cybercrime.</description>
    
    <dc:publisher>No publisher</dc:publisher>
    <dc:creator>belasag</dc:creator>
    <dc:rights></dc:rights>
    
      <dc:subject>Education: Information Sharing</dc:subject>
    
    
      <dc:subject>Security Services: Technology Consulting / Business: CERT</dc:subject>
    
    
      <dc:subject>Security Services: Technology Consulting / Business: CERT News</dc:subject>
    
    
      <dc:subject>Security Services: Technology Consulting / Business: Cooperation</dc:subject>
    
    
      <dc:subject>Security Services: Technology Consulting / Business: Good Practice</dc:subject>
    
    <dc:date>2012-02-28T12:39:18Z</dc:date>
    <dc:type>Report/Study</dc:type>
  </item>


  <item rdf:about="http://www.enisa.europa.eu/activities/cert/background/inv/cert-eu/cert-eu">
    <title>CERT-EU</title>
    <link>http://www.enisa.europa.eu/activities/cert/background/inv/cert-eu/cert-eu</link>
    <description>CERT Pre-Configuration Team: 
The EU Institutions set up a Computer Emergency Response Pre-configuration Team (CERT-EU) on June 1st 2011. The team is made up of IT security experts from the main EU Institutions (European Commission, General Secretariat of the Council, European Parliament, Committee of the Regions, Economic and Social Committee) and ENISA.

The Pre-configuration Team will gradually roll out its services, starting with Announcements, Alerts and Incident Response Coordination.

At the end of one year's preparatory work by the team, an assessment will be made leading to a decision on the conditions for establishing a full–scale Computer Emergency Response Team for the EU Institutions.
</description>
    <content:encoded xmlns:content="http://purl.org/rss/1.0/modules/content/"><![CDATA[<p><strong><br /></strong></p>
<p><strong>Constituency</strong><br />The constituency of CERT-EU is composed of all the EU Institutions, Agencies and Bodies.</p>
<p><a href="http://europa.eu/about-eu/institutions-bodies/index_en.htm">http://europa.eu/about-eu/institutions-bodies/index_en.htm</a></p>
<p><strong>Team Description in Accordance with RFC 2350</strong><br />CERT-EU has published a <a class="external-link" href="http://cert.europa.eu/static/RFC2350/RFC2350_CERT-EU_v1_0.pdf"><span class="external-link">document</span></a> to provide basic information about the CERT-EU Pre-Configuration Team, its channels of communication, and its roles and responsibilities.</p>
<p><strong>Context</strong><br />In recent years, CERTs have been developed in both the private and public sectors. These teams are made up of small numbers of cyber-experts who are connected to the internet and who can effectively and efficiently respond to information security incidents and cyber threats, often on a 24 hours a day, 7days a week basis.</p>
<p>In the <a class="external-link" href="http://ec.europa.eu/information_society/digital-agenda/index_en.htm">Digital Agenda for Europe</a> adopted in May 2010 (see <a class="external-link" href="http://europa.eu/rapid/pressReleasesAction.do?reference=IP/10/581&format=HTML&aged=0&language=EN&guiLanguage=en">IP/10/581</a>, and <a class="external-link" href="http://europa.eu/rapid/pressReleasesAction.do?reference=MEMO/10/200&format=HTML&aged=0&language=EN&guiLanguage=en">MEMO/10/200</a>), the Commission committed itself to establishing a CERT for the EU Institutions, as part of the EU's commitment to a reinforced and high level EU Network and Information Security Policy in Europe. In August 2010 the Commission requested four cyber-security experts known as the "Rat der IT Weisen" to make recommendations on how to set up such a CERT. Their report was finalised in November 2010.</p>
<p>The Digital Agenda also calls on all Member States to establish their own CERTs, paving the way to an EU-wide network of national and governmental Computer Emergency Response Teams by 2012 (see <a class="external-link" href="http://europa.eu/rapid/pressReleasesAction.do?reference=IP/11/395&format=HTML&aged=0&language=EN&guiLanguage=en">IP/11/395</a>). The EU's Council of Telecoms Ministers adopted <span class="external-link"><a class="external-link" href="http://register.consilium.europa.eu/pdf/en/11/st10/st10299.en11.pdf">conclusions</a> </span>on 27th May 2011, confirming this objective.</p>
<p></p>
<p><strong>CERT-EU Website:</strong></p>
<p><a class="external-link" href="http://cert.europa.eu/cert/filteredition/en/CERT-LatestNews.html">http://cert.europa.eu/cert/filteredition/en/CERT-LatestNews.html</a></p>]]></content:encoded>
    <dc:publisher>No publisher</dc:publisher>
    <dc:creator>Cosmin Ciobanu</dc:creator>
    <dc:rights></dc:rights>
    
      <dc:subject>Security Services: Technology Consulting / Business: CERT</dc:subject>
    
    
      <dc:subject>Security Services: Technology Consulting / Business: CERT News</dc:subject>
    
    <dc:date>2012-01-09T10:05:00Z</dc:date>
    <dc:type>Page</dc:type>
  </item>





</rdf:RDF>

