TR-CERT
Mehmet Eriş
eris@uekae.tubitak.gov.tr
Tel: (+90 262) 648 1527
Agenda
• CSIRT Framework
– Mission Statement
– Constituency
• Authority
– Organization
– Relations
• Services
• TR-CERT Project
Mission Statement
• TR-CERT’s objectives are:
– build incident response capability within
Turkey,
– coordinate incident response activities
between government organizations and any
other related party
– coordinate any international incident
– to build knowledge and experience exchange
platform within constituency
– to obtain nationwide incident picture
Constituency
• .gov.tr (all incidents related with
governmental organizations)
• .tr (coordinates only international
incidents)
Authority
• No authority over constituency
• Voluntary basis
Organization
TÜBİTAK
Other Research
Institutions
Other Research
Institutions
Kryptology Group
UEKAE
Network Security
and
Common Criteria
Group
Other Research
Institutions
Microelectronics
Group
EMI/EMC
Test Laboratuary
TÜBİTAK
• The Scientific and Technological Research Council of
Turkey.
• TÜBİTAK is responsible for
– promoting,
– developing,
– organizing,
– conducting and
– coordinating
research and development in line with national targets and
priorities.
• TÜBİTAK reports directly to the Prime Minister and acts
as an advisory agency to the Turkish Government on
science and research issues.
Web Address
www.tubitak.gov.tr
UEKAE
• National Research Institute of Electronics
and Cryptology
• Focused on three areas
– Information Security
– Telecommunications
– Microelectronics
Web Address:
www.uekae.tubitak.gov.tr
Network Security and Common Criteria Group
• Two offices in Ankara and Gebze (40 km
to İstanbul)
• Services Offered by Network Security and
Common Criteria Group*
– Consultation (ISO 27001, COBIT)
– Training
– Penetration Testing
– Security Audit
– Common Criteria Evaulations
* Excluding Incident Response
Network Security and Common Criteria Group
• Services are offered to:
– Government organizations
– Banking sector
– Telecommunication sector
– ...
Relations with Other Teams
• TF-CSIRT
• FIRST
Services
• Incident Coordination
• Incident Response Support and On Site
Incident Response (at crisis situations)
• CSIRT Support
CSIRT Support Service
• Training
– CSIRT Setting Up and
Management
– Technical Incident
Response
• Consultation
– CSIRT Working Groups
Project Plan
• Pilot Phase
– January 2008
• Fully Operational Phase
– September 2008
Contact Points
• Mehmet ERİŞ
Email: eris@uekae.tubitak.gov.tr
Tel: (+90 262) 648 1527
Fax: (+90 262) 648 1100
Working Hours: 08.00 – 17.00 (GMT+2)
Gebze / KOCAELİ
• Mr. Ünal TATAR
Email: tatar@uekae.tubitak.gov.tr
Tel: (+90 312) 427 7366 / Ext: 109
Working Hours: 09.00 – 18.00 (GMT+2)
ANKARA
Thanks and
Any questions?