427 Botnet fm qxd

Edu-Ops
http://isotf.org/mailman/listinfo/edu-ops
■
Anti-Phishing Working Group
www.apwg.org
www.syngress.com
402
Chapter 11 • Intelligence Resources
427_Botnet_11.qxd 1/9/07 9:56 AM Page 402

---

■
Botnets
www.whitestar.linuxbox.org/mailman/listinfo/botnets
■
Shadowserver
www.shadowserver.org/mailman/listinfo/shad-
owserver
■
University Security Operators Group (UNISOG)
https://lists.sans.org/mailman/listinfo/unisog
Membership 
Organizations and How to Qualify
While many of the organizations we’ve discussed so far are open to the public
with minimal or no requirements for joining, some have stringent require-
ments that must be met to qualify for membership.These groups provide
intelligence about botnets, but only to those who are in the current member-
ship, and often include the condition that information isn’t shared outside the
group.The exception to sharing information, of course, is when it is used to
protect your own network or for the security of your own organization.
The requirements of joining such organizations vary. Some may be limited
to educational institutes, medical organizations, government funded research, or
other types of organizations. A membership organization like the Institute of
Computer Forensic Professionals (www.forensic-institute.org) is an example of
one that limits membership to those in a specific profession. If a person works
in the field of digital evidence processing, and passes tests and meets certain cri-
teria, membership is given. Other organizations may not limit membership to
those in a specific field or area of employment, such as those working for uni-
versities or colleges, but will require specific requirements to be met.The spe-
cific requirements are available on the organizations’ Web sites, but often share
similar characteristics in determining who may be a member.
One such organization that limits membership is the Research and
Education Network—Information Sharing and Analysis Center (REN-ISAC).
Visiting their Web site at www.ren-isac.net, you will find limited information
available to the public.The real source of information is limited to those who
are members of the organization.To become a member of an organization like
REN-ISAC, requirements like the following need to be met: