In 2022, RNP's Security Incident Response Center (CAIS), one of the first security incident response groups in Brazil, completed 25 years of history and pioneering spirit. CAIS/RNP was one of the first CSIRTs in the country to act nationally in the detection, resolution and prevention of incidents, making the academic network and its user institutions safer and more resilient.  

The history of CAIS/RNP does not begin long after the history of the Brazilian academic network. The then-called “RNP project” was officially launched in 1989 by the Ministry of Science and Technology (MCT), with the aim of creating a national Internet network infrastructure for academic purposes. In 1992, the Internet arrived in Brazil, reaching ten states and the Federal District. Only a few years later, articulations began to create a center for handling security incidents at the National Research Network (RNP). 

The creation of the CSIRT began in mid-1996, under the management of the then General Coordinator, Tadao Takahashi. CAIS/RNP began its operation in May 1997, when most of the Brazilian networks connected to the Internet were managed without concern or awareness of existing security problems and vulnerabilities. Since then, threats to the academic network such as invasions, dissemination of spam, defacement, phishing, denial of service attacks, among others, have been detected and treated by CAIS/RNP together with the technical teams of teaching and research institutions. 

“CAIS/RNP was created at a time when Internet use in Brazil was still in its infancy. This made it possible for CAIS/RNP to develop as an area, following threat trends, security problems and ways of using the Internet. The Internet, when it first appeared in Brazil, was very focused on the exchange of scientific information. Over time, it became popular and became a work tool. Today, we already have the Internet present in everything. RNP's CSIRT acquired experience in the most diverse types of Internet applications, working on various security challenges, which allowed it to accumulate a broad view of cyber threats”, explains Edilson Lima, Security Manager at CAIS/RNP. 

During all these years, CAIS/RNP has been a prominent player in the construction of a safe Internet and, therefore, collects milestones. From being the first Brazilian CSIRT to participate in the Forum of Incident Response and Security Teams (FIRST) to supporting other security teams to rise up all over the globe: it is undeniable that CAIS/RNP is present in the history of cybersecurity in Brazil and the world.  

“CAIS/RNP collaborates and has always collaborated intensely for the development of information security in the country and internationally. CAIS/RNP is a great promoter of security in the RNP System, disseminating good practices, encouraging the use of technologies and individually supporting each institution in this ecosystem so that it increases its level of security. Outside Brazil, CAIS/RNP contributes with its experience. RNP's CSIRT is not just about raising awareness, it isn't just about software architecture or just network security. Our scope of work is and has always been very broad, and this allows us to exchange knowledge with other teams with similar challenges”, Lima comments.  

As part of the 25th anniversary celebrations, CAIS/RNP recalled some of the most important events that permeated its history of success and pioneering spirit. In a timeline format, the area highlighted actions that were structuring for the growth and maturation of security in the RNP System and for the cybersecurity community in the country. 

Visit the CAIS/RNP landmarks page and learn about this history