Results of a Workshop on Research in Incident Handling

This document contains the results of the first CERT Invitational Workshop on Research in Incident Handling, held at the Software Engineering Institute in November 992. The workshop was convened to address a wide spectrum of computer, network, and information security topics from the perspective of incident handling, both in the present and in the future. The intent was to bring together researchers, incident handling specialists, users, system administrators, and managers to encourage an exchange of information and experience. Specifically, it was intended to identify lucrative areas for research and development in improving the practice of incident handling and in applying the experience- and information-base that the CERT Coordination Center has amassed during its existence.