Contact list

Your Wiki administrator is Arno Schoenmakers. In his absence, contact Teun Grit or Hanno Holties.

• Teun Grit (administrator), 0521-595717, 0593-332394, 06-25018054, grit@astron.nl
• John Romein (chair), 0521-595792, romein@astron.nl
• Chris Broekema, 0521-595181, 050-3639347, broekema@astron.nl

The Lofar organization has installed an Internet Security Incident Response Team (IRT). This team consists of

• John Romein (group leader)
• Chris Broekema (R&D scientific programmer)
• Teun Grit (System administrator)
• Roel Gloudemans (external advisor)

This team is responsible for dealing with time critical computer security related incidents (hacks/abuse/denial of service) . The tasks of this team are purely reactional. Creation of a security policy and a secure infrastructure is left te systems management. The team is a temporary organization until a LOFAR security policy is agreed upon, but the team has received permission from management to disable any Lofar service needed to avoid further damage.

So if any illegal activity is detected on the network or systems, try to alert your systems manager first, but if that is not possible, or you are the systems manager, alert the IRT immediately (contact details above). The team will then: * Investigate the incident * Take inventory of the damage * Gather evidence * Stop the illegal activity * Advise systems management on how to stop the gap (system/service restoration is also left to systems management) * Communicate with LOFAR management and local authorities (if allowed by LOFAR management) * Communicate with managers of infrastructures around the LOFAR network (Astron/RUG/Sara)

The team will use a structured approach for each incident. If needed, this approach will be updated regularly to create a best practice which can be used in the operational phase of LOFAR. The team will also

Any Lofar user who has an indication for abuse attempts on Lofar systems has the duty to warn one of the team members immediately.