[GTER] IRT-object no Registro.br

[MARLON BORBA]

Prezados,

Não sei muito bem em qual lista postar esta pergunta, mas...

Estou lendo o Guia de Gerenciamento de Incidentes da ENISA [1], que, a
uma certa altura, descrevendo maneiras de identificar a "constituency"
de um CSIRT, ensina:

"IP address ranges are present as inetnum-objects in the RIPE database
in Europe, as RIPE is the European registry for IP numbers11. The RIPE
database also allows you to register your CERT as an IRT-object. And
subsequently, RIPE enables you and the registry of your IP addresses to
refer to your IRT-object in the various inetnum-objects. This way, by
looking at an IP address in the RIPE database, you can see immediately
which CERT is responsible for handling complaints related to that IP
address (see also section 8.9.1). In addition, reports about internet
security issues can easily be routed to the appropriate team12! Note
that if your team is accredited by the ‘Trusted Introducer for CERTs
in Europe’ or TI13, automatic generation of an IRT-object for your
team is handled by the TI * but in such cases you still do need to
work with your local IP registry to refer to that IRT-object from the
inetnum-objects."

No Whois do Registro.br vi que existe esse conceito de inetnum-objects;
no entanto, não localizei os IRT-objects. Seria o abuse-c?

[1]
http://www.enisa.europa.eu/act/cert/support/incident-management/files/good-practice-guide-for-incident-management




-- 

Abraços,

Marlon Borba
Técnico Judiciário · Segurança da Informação
IPv6 Evangelist · Moreq-Jus Evangelist
Comissão Local de Resposta a Incidentes - CLRI
TRF 3 Região
(11) 3012-2030 (VoIP)
--
Governing for enterprise security
means viewing adequate security as
a non-negotiable requirement of
being in business.
Carnegie-Mellon CERT
--