A security incident data model

Abstract

This paper presents a security incident data model. The model uses many of the existing security incident taxonomies to organise its security incident related information. Where characteristic of incidents is not covered by existing taxonomies some progress has been made in developing one. The proposed structure stores both management and technical information. Indication of further development for the presented core structure has also been given.