Foundstone Authors Incident Response Publication; New Book Explores Computer Crime Investigations.

Business Editors/Legal Writers

IRVINE, Calif.--(BUSINESS WIRE)--July 12, 2001

Foundstone Inc., the premier provider of managed and professional security assessment services and education, today announced the availability of a new security industry publication, "Incident Response: Investigating Computer Crime."

Following in the footsteps of Foundstone's international best seller "Hacking Exposed," "Incident Response: Investigating Computer Crime" details the new strategies and knowledge required to understand and fight computer crime.

In "Incident Response: Investigating Computer Crime," Foundstone authors Kevin Mandia and Chris Prosise provide an insider's look at the legal, procedural and technical steps of computer forensics and analysis. The book, published by McGraw-Hill/Osborne Media, is filled with detailed, yet understandable information, and is frequently illustrated with FBI and other real world case studies, which show how to resolve computer security incidents. It focuses on the following topics:

-- How to evaluate a computer security incident involving insider threat,
Internet fraud, ransom letters extortion, unauthorized access, denial of
service, and theft of information

-- Ways to determine the best response

-- How to implement best response strategy, including detailed technical
checklists and toolkits

-- The role of the response team, legal counsel, and law enforcement

Prosise and Mandia are two of this country's most respected computer security experts. Both have developed and taught courses, written books and articles on incident response, hacking and network security, and worked with commercial and governmental entities, such as the FBI, State Department, CIA, United States Air Forces and NASA. They are featured speakers on incident response at security conferences worldwide.

Mandia also teaches Foundstone's 4-day "Incident Response & Computer Forensics" course. The course provides security professionals with the forensic techniques to recognize, respond to, and recover from insider and outsider attacks. Participants learn the science of incident response through presentations and hands-on lab exercises. The next course is Sept. 10-13 in Boston.

About the Authors

Mandia, director of computer forensics at Foundstone, leads the company's premier incident response and forensics services, delivering consulting and training services to clients. Mandia was formerly a Special Agent with the Air Force Office of Special Investigations (AFOSI), specializing in computer intrusion cases. While there, he developed a computer intrusion response course specifically for the FBI.

Mandia has trained more than 400 FBI agents as well as personnel from the State Department, the CIA, NASA, the U.S. Postal Service, the Air Force, and other government agencies. He is a regular speaker at numerous forums, including the Interpol Computer Crime Conference, and is on the editorial board for the International Journal on Cyber Crime. Mandia has been involved with more than 20 computer intrusion cases, running the gamut from international computer intrusion to corporate insider hacking.

Prosise is a co-founder and vice president of professional services for Foundstone. Prosise is a recognized network security expert with extensive experience in attack and penetration testing and incident response. Prosise has led government and commercial security teams on missions worldwide, from sensitive incident response missions on Top Secret government networks to comprehensive security assessments for some of the world's largest corporations.

Prosise is a featured speaker at multiple security conferences such as Forum of Incident Response and Security Teams (FIRST) and Networld+Interop. He has a regular column on CNET.com and is the technical editor of the best seller, "Hacking Exposed: Network Security Secrets & Solutions."

About Foundstone

Foundstone addresses the security and privacy needs of Global 2000 companies with its world-class Managed Security Services (MSS) coupled with Professional Consulting and Education service offerings. Foundstone has one of the most dominant security talent pools ever assembled, including experts from Ernst & Young, KPMG, PricewaterhouseCoopers, "Black World" defense contractors, and the Department of Defense.

Foundstone executives authored the international best seller "Hacking Exposed: Network Security Secrets & Solutions." Foundstone has headquarters in Irvine. Find more information at www.foundstone.com or by calling 877/91-FOUND.

Note To Editors: Foundstone is a trademark of Foundstone Inc. All other companies, brands names or products are trademarks or registered trademarks of their respective companies.