Friday, March 11, 2016

Common Vulnerabilities and Exposures - A New Approach

From Slash-Dot

For the last 17 years, the American not-for-profit MITRE Corporation has been editing and maintaining the list of Common Vulnerabilities and Exposures (CVEs). According to a number of researchers, MITRE has lately been doing a lousy job when it comes to assigning these numbers, forcing researchers to do without them or to delay public disclosure of vulnerabilities indefinitely. The problem is getting worse by the day, and the situation has spurred Kurt Seifried, a "Red Hat Product Security Cloud guy" and a CVE Editorial Board member, to create a complementary system for numbering vulnerabilities.

CVE® International in scope and free for public use, CVE is a dictionary of publicly known information security vulnerabilities and exposures. Here's details about Kurt Seyfried's recommendation.

No comments:

Post a Comment