Adding the Fourth "R": A Systems Approach to Solving the Hacker's Arms Race

Conference · Sun Jan 01 00:00:00 EST 2006

OSTI ID:1013321

Endicott-Popovsky, Barbara E; Frincke, Deborah A

In this paper, the authors propose a modification of CERT's 3 R model to include a 4 th R, the discipline of Redress, identified as a necessary step to end the hacker arms race. Redress will require implementation of computer forensic investigation methods, tools and techniques that will permit evidence gathered to be admissible in a court of law, a standard not often understood or followed by many who are responsible for securing networks today. This leads the authors to conclude that there is a need for future work that will involve re-examination of the mechanisms and procedures used to collect evidence of network intrusions in order to ensure that the Rules of Evidence requirements are considered.

• Research Organization: Pacific Northwest National Lab. (PNNL), Richland, WA (United States)
• Sponsoring Organization: USDOE
• DOE Contract Number: AC05-76RL01830
• OSTI ID: 1013321
• Report Number(s): PNNL-SA-47411; TRN: US201110%%582
• Resource Relation: Conference: Proceedings of the 39th Hawaii International Conference on Systems Science (HICSS39), January 4-7, 2006, Kauai, HI
• Country of Publication: United States
• Language: English

Related Subjects

99 GENERAL AND MISCELLANEOUS//MATHEMATICS, COMPUTING, AND INFORMATION SCIENCE
COMPUTERS
IMPLEMENTATION
MODIFICATIONS
security
forensics