Provided new architecture for discover and diagnose computer incident according NIST sp ۸۰۰-۶۱ and ITIL

This paper provided new architecture for discover incident and make report of incident. This architecture is according standard NIST and ITIL framework. In this architecture at first recognize incident with controlling input and output system, monitoring all of the system in the regular time cycle. After that finding the reality incident and in the next step made accurate reports for next teams and manger organ. Also, in the architecture is made a database for controlling incident in future.

کلیدواژه ها:

incident ، NIST ، ITIL ، offensive ، incident computer ، discovery incident ، incident manager ، diagnose incident ، identification and classify incident ، registration incident