Speakers: Juhani Eronen and Anto Veldre

With a total of 7 generations of automated abuse handling, CERT-EE and CERT-FI are now looking into bringing the tools and workflows for community-wide use. We call for multilateral collaboration, by sharing the lessons-learned and offering a starting point. With public/private collaboration we have bootstrapped an open framework, which we have experimented on together. In this framework we have documented the available feeds of information, use cases, processes, workflows, architectures, terminology, and the context of abuse fighting. We have identified different interest groups and how we could provide them with process building blocks and supporting software, such as the AbuseHelper toolkit. We believe that we are now ready to demonstrate effective trusted sharing in action. In this presentation we explain the lessons learned and how the current generation manages them. Together with you we will also take a step towards the future, considering how the integration of abuse data with network monitoring and audit findings could serve to provide much-needed information for the management of infrastructure risks.

(This presentation can be linked to 'CERT-FI Autoreporter and the automated abuse handling concept')