Where to Find Warnings and Advisories

This material is provided for informational and educational purposes only. NCMS selection of sources and presentation does not constitute any verification of the information, nor does it constitute endorsement by NCMS of the organization or the material. 

Each organization that provides alerts and warnings also provides appropriate use instructions and redistribution limitations. NCMS fully supports both the letter and spirit of these instructions. Please be attentive to the appropriate use of this information. 

Often a few minutes or hours make all the difference in effectively defending your company. There are commercial information services that provide up-to-the-minute technical IT advice for system administrators. This educational and awareness material is not intended for that purpose.

Please visit the reference sites (listed below) for the most timely, accurate, and complete information. 

Click here  
to view recent warnings and advisories maintained by NCMS.


CERT (Computer Emergency Response Team)

The CERTŪ Coordination Center (CERT/CC) is a center of Internet security expertise, at the Software Engineering Institute, a federally funded research and development center operated by Carnegie Mellon University. CERTŪ studies Internet security vulnerabilities, handles computer security incidents, publishes security alerts, researches long-term changes in networked systems, and develops information and training to help industry improve security.

NCMS is developing a cooperative relationship with CERT/CC for training and education. 

CERT advisories address Internet security problems. They offer an explanation of the problem, information that helps you determine if your site has the problem, fixes or workarounds, and vendor information. All their advisories, published since 1988, are available from their web site advisory archives.


Internet Security Systems

Internet Security Systems (ISS) is a well known provider of total information security management for networks, servers, applications and desktops. Among other services, they offer a Global Internet Threat Intelligence Service and emergency response services to industry. ISS is a strong supporter of the InfraGard program and has graciously extended its Internet Threat Overview (Alertcon Status) to IMIA (and other InfraGard) members for awareness and educational use. ISS maintains the authoritative listing for its Global Internet Threat Intelligence Service here.


IWS - The Information Warfare Site

The Information Warfare Site is an online resource that aims to stimulate debate about a range of subjects from information security to information operations and e-commerce. It is the aim of the site to develop a special emphasis on offensive and defensive information operations. IWS has developed a discussion forum and a mailing list to enable a more interactive debate.

IWS is a partner with NCMS in developing the InfraGard Manufacturing Industry Association.


National Infrastructure Protection Center (NIPC)

The National Infrastructure Protection Center (NIPC) is the national focal point for gathering information on threats to critical infrastructures. It is the principal means of facilitating and coordinating the federal government's response to an incident, mitigating attacks, investigating threats, and monitoring reconstitution efforts. The NIPC produces three levels of infrastructure warnings:

Assessments: address broad, general incident or issue awareness information and analysis that is both significant and current but does not necessarily suggest immediate action

Advisories: address significant threat or incident information that suggests a change in readiness posture, protective options and/or response.

Alerts: address major threat or incident information addressing imminent or in-progress attacks targeting specific national networks or critical infrastructures.

NIPC maintains the authoritative listing of NIPC warnings at http://www.nipc.gov/warnings/warnings.htm 


UNIRAS

The Unified Incident Reporting and Alert Scheme (UNIRAS) was established in 1992 with the role of gathering information on IT security incidents in United Kingdom Government departments and agencies, producing periodic analysis and assessment of incidents and trends, and issuing alerts and briefings on matters of IT security concern. UNIRAS is now a fully integrated part of the UK's National Infrastructure Security Co-ordination Centre (NISCC).

UNIRAS is the UK Government Computer Emergency Response Team (CERT). UNIRAS Alerts and Briefings are highly regarded, and are posted for the public on the UNIRAS web site.


Click here to view recent warnings and advisories maintained by NCMS.

 

Please check out these related sites

Copyright 2004
National Center for Manufacturing Sciences