Skip to content

Disclosure: the Mother of All Vulnerabilities

Michael I. MorgensternRichard SchaefferMarcus SachsO. Sami SaydjariSteve LipnerTom Parker

Michael I. Morgenstern and Richard Schaeffer explores disclosure: the mother of all vulnerabilities at DEF CON 10, examining vulnerability-disclosure and practical defenses.

Summary

Architecture and Background

Panel - Disclosure: The Mother of All Vulnerabilities Michael Morgenstern will be leading a panel comprised of several individuals from the 'other side' of Information Security. Panel highlights will include: # An overview on vulnerability disclosure in the past # Potential impacts of irresponsible disclosure # New threats (Does cyber terrorism exist?) # The vulnerability disclosure "food chain" # The issues involved in the handling of a new vulnerability, from the perspective of a commercial software vendor.

Vulnerability Analysis

# What "responsible disclosure" means. # The ideal disclosure metric, is it plausible?

Exploitation and Demonstrations

# Ways in which communities can work together to better the disclosure process. There will be time for questions during and after the presentation Panel Members are: Michael I.

Remediation and Defensive Strategies

Morgenstern Global InterSec, Moderator Richard Schaeffer National Security Agency Marcus H. Sachs Office of Cyber space Security O. Sami Saydjari SRI International Steve Lipner Microsoft Corp Tom Parker Global InterSec

Related talks

Main Stage·1 hr 47 min

  • DEF CON
  • Policy
  • Date: Aug 2007
  • Location: Las Vegas

Tobias · Fiddler

Tobias and Fiddler details matt Fiddler & Marc Weber Tobias: High Insecurity: Locks, Lies, and Liability Matt Fiddler leads a Threat Management Team for a Fortune 100 Organization.

vulnerability-disclosuresecurity-ethicscoordination+1

Main Stage·48 min

  • DEF CON
  • Policy
  • Date: Aug 2007
  • Location: Las Vegas

David Mortman · Paul Proctor · Window Snyder · Ian Robertson · David Maynor · Dave Goldsmith

David Mortman and Paul Proctor explores vulnerability disclosure panel at DEF CON 15, examining vulnerability-disclosure and practical defenses.

vulnerability-disclosuresecurity-ethicscoordination+1