Three ENISA Reports

Spring does seem to be a popular time for organisations and vendors to issue reports. I'm sure we'll be seeing more in the run up to Infosec Europe 2011, but I will keep you informed of anything topical.

The European Network and Information Security Agency (ENISA) issued Data Breach Notification Insights in January and in the last few weeks has issued three other reports which may be of some general interest.

Botnets: Measurement, Detection, Disinfection and Defence

Botnets: Measurement, Detection, Disinfection and Defence describes 25 different practices to measure, detect and defend against botnets. These are discussed under the objectives of mitigating existing botnets, preventing new infections and minimising the profitability of botnets and cybercrime. The recommendations are then discussed for particular groups — regulators & law enforcement, internet service providers, researchers, end users and companies.

Mapping Security Services to Authentication Levels

This report examines e-identity management in the European Union, and in particular the activities of STORK (Secure idenTity acrOss boRders linKed). It looks at the various authentication levels and their mapping to public electronic services in the eGovernment programme framework.

Resilience of the Internet Interconnection Ecosystem

The authors of the latest ENISA report discuss Internet vulnerabilities, concerns about the sustainability of current business models, and the interactions of dependencies and economics. They describe the issues and propsoe eleven recommendations to increase the Internet's resilience.