nist.sp.800-61r2信息安全资料 .docxVIP

SpecialPublication800-61Revision2

ComputerSecurityIncidentHandlingGuide

RecommendationsoftheNationalInstituteofStandardsandTechnology

PaulCichonskiTomMillarTimGranceKarenScarfone

/10.6028/NIST.SP.800-61r2

NISTSpecialPublication800-61Revision2

ComputerSecurityIncidentHandlingGuide

RecommendationsoftheNationalInstituteofStandardsandTechnology

PaulCichonski

ComputerSecurityDivisionInformationTechnologyLaboratory

NationalInstituteofStandardsandTechnologyGaithersburg,MD

TomMillar

UnitedStatesComputerEmergencyReadinessTeamNationalCyberSecurityDivision

DepartmentofHomelandSecurity

TimGrance

ComputerSecurityDivisionInformationTechnologyLaboratory

NationalInstituteofStandardsandTechnologyGaithersburg,MD

KarenScarfoneScarfoneCybersecurity

COMPUTER SECURITY

August2012

U.S.DepartmentofCommerce

RebeccaBlank,ActingSecretary

NationalInstituteofStandardsandTechnology

PatrickD.Gallagher,

UnderSecretaryofCommerceforStandardsandTechnologyandDirector

COMPUTERSECURITYINCIDENTHANDLINGGUIDE

ReportsonComputerSystemsTechnology

TheInformationTechnologyLaboratory(ITL)attheNationalInstituteofStandardsandTechnology(NIST)promotestheU.S.economyandpublicwelfarebyprovidingtechnicalleadershipfortheNation’smeasurementandstandardsinfrastructure.ITLdevelopstests,testmethods,referencedata,proofofconceptimplementations,andtechnicalanalysestoadvancethedevelopmentandproductiveuseofinformationtechnology.ITL’sresponsibilitiesincludethedevelopmentofmanagement,administrative,technical,andphysicalstandardsandguidelinesforthecost-effectivesecurityandprivacyofotherthannationalsecurity-relatedinformationinFederalinformationsystems.TheSpecialPublication800-seriesreportsonITL’sresearch,guidelines,andoutreacheffortsininformationsystemsecurity,anditscollaborativeactivitieswithindustry,government,