{"id":759,"date":"2012-05-15T19:18:40","date_gmt":"2012-05-15T19:18:40","guid":{"rendered":"http:\/\/localhost\/camcert-live\/?page_id=759"},"modified":"2012-05-15T19:18:40","modified_gmt":"2012-05-15T19:18:40","slug":"incident-handling","status":"publish","type":"page","link":"https:\/\/www.camcert.gov.kh\/en\/incident-handling\/","title":{"rendered":"Incident Handling"},"content":{"rendered":"<p>In general, types of activity that are commonly recognized as being in violation of a typical security policy include but are not limited to attempts (either failed or successful) to gain unauthorized access to a system or its data, including PII related incidents (link to the below description) unwanted disruption or denial of service the unauthorized use of a system for processing or storing data changes to system hardware, firmware, or software characteristics without the owner&#8217;s knowledge, instruction, or consent.<\/p>\n<p>We encourage you to report any activities that you feel meet the criteria for an incident. Note that our policy is to keep any information specific to your site confidential unless we receive your permission to release that information. In particular, CamCERT responds to incidents as follows:<\/p>\n"},"excerpt":{"rendered":"<p>In general, types of activity that are commonly recognized as being in violation of a typical security policy include but are not limited to attempts (either failed or successful) to gain unauthorized access to a system or its data, including PII related incidents (link to the below description) unwanted disruption or denial of service the [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"open","ping_status":"open","template":"","meta":{"footnotes":""},"class_list":["post-759","page","type-page","status-publish","hentry"],"x_date":"May 15, 2012","x_author":"admin","x_gravatar":"https:\/\/secure.gravatar.com\/avatar\/869a5e8c3e6c23cc61f84452f54370f74bf9864408909b05de11b0b25b8a59a1?s=96&d=mm&r=g","x_metadata":{"page_option_item_xml":"<item-tag><Accordion><size>element1-1<\/size><header><\/header><tab-item><tab><title>[Scan]: Probe, scan or other suspicious access<\/title><caption>[list type=&quot;arrow&quot;]\n\n&lt;ul&gt;\n&lt;li&gt;Search of weak points (checking server program versions)\n&lt;\/li&gt;\n&lt;li&gt;Attempts of intrusion (failed attempts)\n&lt;\/li&gt;\n&lt;li&gt;Attempts of worm infection (failed attempts)\n&lt;\/li&gt;\n&lt;\/ul&gt;\n\n[\/list]<\/caption><active><\/active><\/tab><tab><title>[Abuse]: Unauthorized relay using server program functions <\/title><caption>[list type=&quot;arrow&quot;]\n\n&lt;ul&gt;\n&lt;li&gt;Use of mail servers or proxy servers by a third party individual, which is unintended by the administrator\n&lt;\/li&gt;\n&lt;\/ul&gt;\n\n[\/list]<\/caption><active><\/active><\/tab><tab><title>[Forged]: Sending e-mails of forged send headers<\/title><caption>[list type=&quot;arrow&quot;]\n\n&lt;ul&gt;\n&lt;li&gt;From: field forged, etc.&lt;\/li&gt;\n&lt;\/ul&gt;\n\n[\/list]<\/caption><active><\/active><\/tab><tab><title>[Intrusion]: System intrusion <\/title><caption>[list type=&quot;arrow&quot;]\n\n&lt;ul&gt;\n&lt;li&gt;Intrusion or altering of the system&lt;\/li&gt;\n&lt;li&gt;Set up of DDoS programs (platform)&lt;\/li&gt;\n&lt;li&gt;Worm infection&lt;\/li&gt;\n&lt;\/ul&gt;\n\n[\/list]<\/caption><active><\/active><\/tab><tab><title>[DoS (Denial of Service)]: Attacks that lead to interference of service operations<\/title><caption>[list type=&quot;arrow&quot;]\n\n&lt;ul&gt;\n&lt;li&gt;Interference due to network convergence (congestion)\n&lt;\/li&gt;\n&lt;li&gt;Shutdown of server programs\n&lt;\/li&gt;\n&lt;li&gt;Shutdown\/Reboot of OS&lt;\/li&gt;\n&lt;\/ul&gt;\n\n[\/list]<\/caption><active><\/active><\/tab><tab><title>[Phishing]: Forge fraud of websites <\/title><caption>[list type=&quot;arrow&quot;]\n\n&lt;ul&gt;\n&lt;li&gt;Set up of forged websites of banking institutions and credit card companies\n&lt;\/li&gt;\n&lt;li&gt;Set up of websites that forward users to the above website\n&lt;\/li&gt;\n&lt;li&gt;(Does not include e-mails)&lt;\/li&gt;\n&lt;\/ul&gt;\n\n[\/list]<\/caption><active><\/active><\/tab><tab><title>[Others]<\/title><caption>[list type=&quot;arrow&quot;]\n&lt;ul&gt;\n&lt;li&gt;Receiving SPAM e-mails\n&lt;\/li&gt;\n&lt;li&gt;Computer virus infection\n&lt;\/li&gt;\n&lt;\/ul&gt;\n\n[\/list]<\/caption><active><\/active><\/tab><\/tab-item><\/Accordion><\/item-tag>","page_option_enable_background":"Yes","page_option_sidebar_template":"right-sidebar","page_option_choose_left_sidebar":"FirstSideBar","page_option_choose_right_sidebar":"FirstSideBar","page_option_show_title":"Yes","page_option_show_content":"Yes","classic_editor_remember":"classic-editor"},"_links":{"self":[{"href":"https:\/\/www.camcert.gov.kh\/en\/wp-json\/wp\/v2\/pages\/759","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.camcert.gov.kh\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.camcert.gov.kh\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.camcert.gov.kh\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.camcert.gov.kh\/en\/wp-json\/wp\/v2\/comments?post=759"}],"version-history":[{"count":1,"href":"https:\/\/www.camcert.gov.kh\/en\/wp-json\/wp\/v2\/pages\/759\/revisions"}],"predecessor-version":[{"id":1659,"href":"https:\/\/www.camcert.gov.kh\/en\/wp-json\/wp\/v2\/pages\/759\/revisions\/1659"}],"wp:attachment":[{"href":"https:\/\/www.camcert.gov.kh\/en\/wp-json\/wp\/v2\/media?parent=759"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}