WARP (information security)
Encyclopedia
WARP is an acronym for Warning, Advice and Reporting Point. A WARP is a community or internal company based service to share advice and information on computer-based threats
and vulnerabilities
.
WARPs typically provide
WARPs typically cost much less to set up than a Computer Emergency Response Centre as in CERT/CC or US-CERT.
Threat (computer)
In Computer security a threat is a possible danger that might exploit a vulnerability to breach security and thus cause possible harm.A threat can be either "intentional" or "accidental" In Computer security a threat is a possible danger that might exploit a vulnerability to breach security and...
and vulnerabilities
Vulnerability (computing)
In computer security, a vulnerability is a weakness which allows an attacker to reduce a system's information assurance.Vulnerability is the intersection of three elements: a system susceptibility or flaw, attacker access to the flaw, and attacker capability to exploit the flaw...
.
WARPs typically provide
- Warning - A filtered warning service, where subscribers receive alertsAlertsAlert is a colloquial term used to define a machine-to-person communication that is important and/or time sensitive. An alert contains user-requested content such as a reminder , a notification , and ultimately an alert...
and advisory information on only the subjects relevant to them. - Advice - An advice brokering service, where members can ask and respond to questions in a trusted secure environmentSecure environmentIn computing, a secure environment is any system which implements the controlled storage and use of information. In the event of computing data loss, a secure environment is used to protect personal and/or confidential data....
. - Reporting - Central collection of information on incidents and problems in a trusted secure environment. The collected information may then be anonymised and shared amongst the membership.
WARPs typically cost much less to set up than a Computer Emergency Response Centre as in CERT/CC or US-CERT.
See also
- CERTCertCert or CERT may refer to:* Certificate, an official document* Certiorari, a Latin legal term for a court order requiring judicial review of a case...
disambiguation page including CERT-like organisations - Information security management systemInformation security management systemAn information security management system is a set of policies concerned with information security management or IT related risks. The idioms arose primarily out of ISO 27001....