2018 Day 2 Katie Moussouris: Resilience and the Art of Bug Bounty Maintenance

Overview: Katie Moussouris is the Founder & CEO of Luta Security. As a computer hacker with more than 20 years of professional cybersecurity experience, Katie has a unique and unparalleled perspective on security research, incident response, vulnerability disclosure, and bug bounty programs. Currently, Katie serves as the founder and CEO of Luta Security. During her tenure with Microsoft, her work included industry-leading initiatives such as starting Microsoft Vulnerability Research, which formalized mul

Key Topics: tiparty vulnerability and supply chain vulnerability coordination across hardware and software as well as launching Microsoft's first bug bounty program. Katie is also the co-author and co-editor of ISO 29147 (vulnerability disclosure) and ISO 30111 (vulnerability handling processes). Working with the Department of Defense, Katie led the launch of the U.S. government's first bug bounty program, "Hack the Pentagon." She also worked with the State Department to help renegotiate the Wassenaar Arrangement, specifically changing the export control language to include technical exemptions

Technical Details: for vulnerability disclosure and incident response. Katie serves in three advisory roles for the U.S. government as a member of the Cyber Safety Review Board, the Information Security and Privacy Advisory Board, and the Information Systems Technical Advisory Committee. She is a cybersecurity fellow at New America and the National Security Institute. Katie is also the founder of the Pay Equity Now (PEN) Foundation, and through the PEN Foundation, she established the Anuncia Donecia Songsong Mangl