427 Botnet fm qxd

www.syngress.com
Intelligence Resources • Chapter 11
403
427_Botnet_11.qxd 1/9/07 9:56 AM Page 403

---

■
The person must be affiliated with a certain organization, and act as a
representative of that organization. In other words, one or a limited
number of people from each organization may join.
■
The candidate must work in an official capacity dealing with com-
puter security and/or incident response, and have responsibility for
the security of that organization or part of it.
■
The person must be permanently employed with the organization.
This is mainly because students, temporary employees, and those
working under contract aren’t suitable representatives of the organiza-
tion, so they don’t meet the previous criteria.
■
A current member must vouch for the candidate.
■
The candidate must agree to a confidentiality agreement and policies
of the organization.
Vetting Members
Vetting
is a process that involves a critical examination of those seeking mem-
bership with an organization. When a person applies to the organization, a
select panel or current members will review a candidate’s information and
decide whether they want that person to join.The organization may also con-
firm employment or other information included in the application. If any
members decide they don’t want a person to join, or information in the
application is found to be false, the application is denied.
The membership organization may also reconfirm the status of members
to determine if the information in their initial application has changed.This is
to confirm that the person is still working for the same employer and in the
same capacity. For example, if the person has been fired, or has changed to a
position that doesn’t involved security, the organization may revoke the
person’s membership because he or she no longer meets the criteria of
joining.