Home page logo
/

educause logo Educause Security Discussion mailing list archives

Re: Software for Tracking Security Incidents
From: Steve Brukbacher <sab2 () UWM EDU>
Date: Wed, 28 Mar 2007 12:54:26 -0500

We're looking at customizing something like OTRS which is an open source
PHP based ticket tracking product.
http://otrs.org/

There was a product offered by Purdue called CIRDB which is no longer
being developed due to loss of funding: This seemed quite popular and
useful...
https://cirdb.cerias.purdue.edu/

There is a commercial product from a London company called QCC we are
doing a webex demo on next week called SID, but it is REALLY expensive.
They have yet to get a school on board but they have priced themselves
out of the market. Were this to change, it might be worth considering.

Their website:
http://www.qccis.com/content.php?section=secureincidentdatabase

Their Flash demo
http://www.qccis.com/sid/online_demo/Loader.swf

We're probably going to get a local programmer to customize OTRS to do
what we need it to do which is take in data from divergent sources and
turn them in to incidents and allow for easy reporting and allow for
manual tickets to be opened.


--
Steve Brukbacher, CISSP
University of Wisconsin Milwaukee
Information Security Coordinator
UWM Computer Security Web Site
www.security.uwm.edu
Phone: 414.229.2224



Brenda B Gombosky wrote:
What is everyone using to track their incidents?  Does anyone know of a
commercial product?


Brenda B. Gombosky, CISSP, CHSP
Director, Information Technology
University of Louisville
Miller IT Center, Room 109
Louisville, KY 40292
(502)852-5037
(502)419-6689


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault