Publications
The National Institute of Cybersecurity, (INCIBE) as reference entity for the development of cybersecurity and digital trust, has among its duties to promote security culture among citizens, the Spanish academic and research network (RedIRIS) and companies, especially for strategic sectors. One of the elements used to promote this INCIBE security culture is creating guides and papers on topics related to cybersecurity. These guidelines and studies are intended to provide both practical and theoretical value to promote and improve digital security in all areas of society.
Last guides
Spanish National Guidelines for Reporting and Managing Cyber Incidents
Posted on 04/28/2020This document provides Information Security Officers (ISOs) with guidelines for complying with the obligation to report cybersecurity incidents that have taken place within Public Administrations, critical infrastructures and strategic operators under their purview, as well as the rest of the entities included in the scope of application of Spanish Royal Decree-Law 12/2018.Guide for an asset inventory management in industrial control systems
Posted on 03/12/2020This guide sets out the steps necessary and main recommendations for conducting an asset inventory in industrial networks. To do this, various possible methods are addressed, and their different characteristics are reviewed.Industrial honeypot implementation guide
Posted on 10/31/2019This guide includes concepts related to honeypots, recommended requisites for their correct implementation, different possible types and their evolution to the present day, where they are implemented, forming a honeynet.
Last studies
Lockbit analysis study
Posted on 03/23/2023This study briefly describes the origin and threat evolution of the ransomware LockBit 3.0, through the analysis of several malicious samples, with the aim of providing the necessary information to identify the characteristics of this malware, its behaviour and the techniques used, thus enabling a better identification and response to it.Threat analysis study: Nobelium
Posted on 08/26/2022This study briefly describes the origin, background and historical evolution of the Nobelium group, through the analysis of a malicious sample, with the aim of providing the necessary information to identify the characteristics of this threat, its behaviour and the techniques used, thus enabling a better identification and response to it.Grandoreiro analysis study
Posted on 06/02/2022This study focuses on the Grandoreiro banking trojan from South America that has spread its operations to other regions, principally Europe, including Spain and Portugal.