Information Security Unit

RFC 2350

1. Document Information

This document describes the incident response service from Universidade do Porto (U.PORTO), which is a portuguese university located in the city of Porto, according to the RFC2350.

1.1 Date of last update

Mon, 14 Dec 2020 15:35:00 +0000

1.2 Distribution list for notifications

There is no existing distribution channel for notifications of updates.

1.3 Locations where this document may be found

The Portuguese version of this document can be found at https://csirt.up.pt/pt/rfc2350.

The English version of this document can be found at https://csirt.up.pt/en/rfc2350.

1.4 Authenticating this Document

For validation purposes, a GPG signed ASCII version of this document is located at https://csirt.up.pt/rfc2350.txt. The key used for signing is the CSIRT.UPORTO key as listed under 2.8.

2. Contact Information

2.1 Name of the team

CSIRT.UPORTO - Computer Security Incident Response Team da Universidade do Porto

2.2 Address

CSIRT.UPORTO
University of Porto
Praça Coronel Pacheco, nº15, -206
4050-453 Porto
Portugal

2.3 Time zone

Portugal/WEST (GMT+0, GMT+1 in Summer Time)

2.4 Telephone number

+351 220 408 721

2.5 Facsimile number

+351 220 408 186

+351 220 408 187

2.6 Other telecommunication

Nonexistent.

2.7 Electronic mail address

Email address for incident reporting:
[email protected]

Email address for other business related to CSIRT.UPORTO's services:
[email protected]

2.8 Public keys and encryption information

User ID: CSIRT.UPORTO (CSIRT University of Porto) %[email protected]>

Key ID: 0x67101002 Key type: RSA

Key size: 4096 Expires: never

Fingerprint: EA9552E3A3512E07DA7548CC5887FE8767101002

2.9 Team Members

Manager: Francisco Peixoto

Members: António Meireles, José Filipe Alves, José Sousa, André Silva, Mário Lima, Catarina Ribeiro.

2.10 Other Information

General information about CSIRT.UPORTO can be found at https://csirt.up.pt/.

2.11 Points of Customer Contact

O CSIRT.UPORTO dispõe dos seguintes meios de contacto

Correio eletrónico para notificação de incidentes de cibersegurança:

[email protected]

Correio eletrónico para outros assuntos relacionados com os serviços CSIRT.UPORTO:

[email protected]

Telefone

+351 220 408 721

3. Charter

3.1 Mission Statement

CSIRT.UPORTO provides computer incident handling in the context of the University of Porto.

3.2 Constituency

O CSIRT.UPORTO responde a incidentes de segurança informática no contexto da comunidade da Universidade do Porto. As gamas de endereços IP abrangidos no âmbito de atuação do CSIRT.UPORTO são:

193.136.24.0/21

193.136.32.0/21

193.136.48.0/21

193.136.252.208/29

193.136.252.216/29

193.136.252.240/28

193.136.253.16/28

193.137.24.0/21

194.210.212.0/23

194.210.214.0/24

2001:690:1EEE:E000::/64

2001:690:2200::/48

3.3 Sponsorship and/or Affiliation

CERT.PT is an integral service of CNCS.

CSIRT.UPORTO is a service integrated in the functional center - Universidade Digital (UPdigital), of the University of Porto Rectory.

Member of the Nacional CSIRT Network:

- https://www.redecsirt.pt/

Member of TF-CSIRT:

- https://www.trusted-introducer.org/directory/teams/csirtuporto.html

3.4 Authority

The main purpose of CSIRT.UPORTO in incident handling is the coordination of incident response. As such, we can only advise our constituency and have no authority to demand certain actions.

4. Policies

4.1 Types of Incidents and Level of Support

CSIRT.UPORTO handles every type of cybersecurity incident, namely, those that result in a security violation of the following types:

CSIRT.UPORTO handles every type of cybersecurity incident, namely, those that result in a security violation of the following types:

4.2 Co-operation, Interaction and Disclosure of Information

4.3 Communication and Authentication

From the communication means made available by CSIRT.UPORTO, telephone and clear text email are considered safe for non-sensitive information. For sensitive information transmission it is required the use of PGP.

5. Services

5.1 Resposta a Incidentes

O CSIRT.UPORTO prevê apoiar os administradores de sistemas na gestão dos aspetos técnica e organizacional dos incidentes. Em particular, poderemos providenciar assistência e aconselhamento com os seguimentos aspetos da gestão de incidentes:

5.1.1 Triagem de Incidentes

5.1.2 Coordenação de Incidentes

5.1.3 Resolução de incidentes

5.2 Proactive activities

6. Incident reporting forms

There are no local forms available.

7. Disclaimers

While every precaution will be taken in the preparation of information, notifications and alerts, CSIRT.UPORTO assumes no responsibility for errors or omissions, or for damages resulting from the use of the information contained within.