The CERIAS Incident Response Database is a web-based system that tracks data related to ongoing incident responses. Responders record the type of event, amount of time spent reacting to the incident (and the cost attached to this), and their role in the response. By collecting this data, a better understanding of the financial costs of incidents can be formed.
LinuxPlanet.com has published an interview with Professor Spafford about the security of Linux relative to other operating systems.
An article by Professor Spafford on the relative security of open source software has been published by G4Tv.com
Professor Spafford’s speech at the Computer Security Institute (CSI) convention has been detailed by an article at dc.internet.com.
Professor Spafford was interviewed by WISHTV8 as part of a story on the security of voting machines.
An article published at CSOonline.com has cited Professor Spafford’s description of a secure web server, which first appeared in Web Security & Commerce (O’Reilly, 1997, S. Garfinkel & G. Spafford).