Proactive detection - Good practices gap analysis recommendations

Back to all publications

Publication date:May 26, 2020

The current project aims to provide a complete inventory of all available methods, tools, activities and information sources for proactive detection of network security incidents, which are used already or potentially could be used by incident response teams in Europe nowadays. The current document covers the good practices identified, gap analysis and recommendations. The gap analysis identified fields for potential additional work and analysis.

The results of the project are divided in three reports and in a living repository hosted on GitHub:

1- Report - Survey results

  • Survey among incident response teams in Europe;
  • Comparison with the 2011 survey.

2- Report - Measures and information sources

  • Inventory of available methods, tools, activities and information sources;
  • Evaluation of identified measures and information sources.

3- Report - Good practices gap analysis recommendations

  • Analysis of the data gathered;
  • Recommendations.

4- Online repository - GitHub

  • Information sources;
  • Measures and tools.