Who are we?

The acronym CSIRT (Computer Security Incident Response Team) refers to a unit responsible for addressing computer incidents. The main task of CSIRT is to provide services necessary for managing security incidents, mitigating or eliminating their consequences, and restoring the operation of information systems and related communication resources.

What do we want?

• To create a team of students and faculty members within FEI STU that focuses on security within our faculty.
• Familiarize ourselves with existing software (e.g., Flowmon), review current technologies on the market, choose suitable solutions for threat monitoring, and integrate them into a unified system.
• Establish a lab for analyzing security incidents.
• Create a targeted alert management system.
• Communicate with other CSIRT organizations.
• In the future, we would like to expand our reach beyond the faculty.

What do we focus on?

• Analysis of security incidents, and if possible, their resolution.
• Analysis of vulnerabilities and artifacts.
• Collecting information from various sources within the faculty.
• Alerts and warnings.
• Notifications.

Who are we looking for?

• We are looking for students interested in gaining new knowledge and skills in the field of security.
• Applicants who would like to pursue a career in cyber security or work directly in CSIRTs or SOC teams in the future.
• Interest in subjects such as Computer Crime, Introduction to Computer Security, Computer Networks (network security), Operating Systems, etc., is welcome.