Disclosure: the Mother of All Vulnerabilities
Michael I. MorgensternRichard SchaefferMarcus SachsO. Sami SaydjariSteve LipnerTom Parker
Michael I. Morgenstern and Richard Schaeffer explores disclosure: the mother of all vulnerabilities at DEF CON 10, examining vulnerability-disclosure and practical defenses.
Summary
Architecture and Background
Panel - Disclosure: The Mother of All Vulnerabilities Michael Morgenstern will be leading a panel comprised of several individuals from the 'other side' of Information Security. Panel highlights will include: # An overview on vulnerability disclosure in the past # Potential impacts of irresponsible disclosure # New threats (Does cyber terrorism exist?) # The vulnerability disclosure "food chain" # The issues involved in the handling of a new vulnerability, from the perspective of a commercial software vendor.
Vulnerability Analysis
# What "responsible disclosure" means. # The ideal disclosure metric, is it plausible?
Exploitation and Demonstrations
# Ways in which communities can work together to better the disclosure process. There will be time for questions during and after the presentation Panel Members are: Michael I.
Remediation and Defensive Strategies
Morgenstern Global InterSec, Moderator Richard Schaeffer National Security Agency Marcus H. Sachs Office of Cyber space Security O. Sami Saydjari SRI International Steve Lipner Microsoft Corp Tom Parker Global InterSec
Related talks
Main Stage·1 hr 47 min
Tobias · Fiddler
Tobias and Fiddler details matt Fiddler & Marc Weber Tobias: High Insecurity: Locks, Lies, and Liability Matt Fiddler leads a Threat Management Team for a Fortune 100 Organization.
Main Stage·48 min
David Mortman · Paul Proctor · Window Snyder · Ian Robertson · David Maynor · Dave Goldsmith
David Mortman and Paul Proctor explores vulnerability disclosure panel at DEF CON 15, examining vulnerability-disclosure and practical defenses.
Main Stage·50 min
Granick
Granick explores disclosure and intellectual property law 2006 - 2007 at DEF CON 15, examining vulnerability-disclosure and practical defenses.


