Incident response to the existence of malicious files in the mirror network
From Apache OpenOffice Wiki
Level of Incident
Range
- A single mirror server has been affected.
- A few mirror servers have been affected, or are being affected.
- Several mirror servers have been affected, or are being affected.
- A Tier-1 server has been affected.
- The master server has been affected.
Trend
- Threats are going to cease.
- Threats are stable, or nearly stable.
- Threats are going to rise.
Priority
- Low - the number of victims is stable, or slowly increasing.
- Middle - the number of victims is increasing.
- High - the number of victims is rapidly increasing.
Severity
- A questioned file is missing or broken and does not work at all.
- A questioned file works but does not severely damage affected users.
- A questioned file works and severely damage affected users.
Sensitivity
- A questioned file is rarely downloaded. e.g. OpenOffice.org 1.1.x, dictionary files
- A questioned file is sometimes downloaded. e.g. OpenOffice.org 2.4.3
- A questioned file is frequently downloaded. e.g. The latest version (3.x) of OpenOffice.org