CERT Network Service Provider and Infrastructure Initiative

NCR-95223 15 PI：理查德·佩西亚为了应对计算机安全威胁，高级研究计划局成立了一个计算机应急小组，以支持互联网用户。互联网CERT协调中心位于卡内基梅隆大学软件工程学院，自1988年11月18日以来一直活跃。CERT被授权与互联网社区合作，检测和解决计算机安全事件。自成立以来，CERT一直在应对源源不断的安全事件。随着互联网用户人数的增长，事件发生率和对互联网网站的影响稳步增长。随着事件发生率的增加，入侵者的老练程度也在增加。入侵者曾经专注于利用薄弱的密码和众所周知的漏洞，现在他们已经进步到检查源文件中的新安全漏洞，利用协议漏洞，并使用工具包来自动化他们的攻击并增加其影响。CERT正在扩大其计划，通过结合技术改进、安全意识和培训以及安全评估活动来加强对事故预防的重视。这一扩展计划包括CERT可以提供特殊帮助的两个领域，以促进互联网演进到下一阶段的有序、安全的发展：1.与路由器制造商的合作2.与网络服务提供商的合作

NCR-95223 15 PI: Richard Pethia In response to computer security threats, the Advanced Research Projects Agency (ARPA) has established a Computer Emergency Response Team (CERT) to support users of the Internet. The Internet CERT coordination center is located at Carnegie Mellon University's Software Engineering Institute and has been active since November 18, 1988. CERT is chartered to work with the Internet community in detecting and resolving computer security incidents. Since its inception, CERT has responded to continuous stream of security incidents. The incident rate and impact on Internet sites has grown steadily as the Internet user population has grown. As the incident rate has grown, so has the sophistication of the intruders. Where intruders once focused on exploitation of weak passwords and widely known vulnerabilities, they have now progressed to examining source files for new security flaws, exploiting protocol flaws, and using tool kits to automate their attacks and increase their impact. CERT is expanding its program to increase its emphasis on incident prevention through a combination of technology improvement, security awareness and training, and security assessment activities. This expanded program includes two areas where CERT can provide special help that will facilitate the orderly, secure progression to the next stage in the Internet evolution: 1. Collaboration with router manufacturers 2. Collaboration with network service Providers