Skip to content

Vulnerability Disclosure Panel

David MortmanPaul ProctorWindow SnyderIan RobertsonDavid MaynorDave Goldsmith

David Mortman and Paul Proctor explores vulnerability disclosure panel at DEF CON 15, examining vulnerability-disclosure and practical defenses.

Summary

Architecture and Background

Panel: Disclosure Panel David Mortman, Moderator CSO-in-Residence, Echelon One Paul Proctor, Moderator VP, Gartner Window Snyder, Vendor Director of Ecosystem Development, Mozilla Corporation Ian Robertson CSO, RIM David Maynor CTO, Errata Security Dave Goldsmith Concerns about ethics for security professionals has been on the rise of late. David Mortman, Paul Proctor, Window Snyder, Ian Robertson, David Maynor, Dave Goldsmith contextualize these mechanics within the broader policy landscape.

Vulnerability Analysis

The technical analysis investigates threat vectors and design shortcomings related to vulnerability-disclosure, security-ethics, coordination, responsible-disclosure.

Exploitation and Demonstrations

Panel: Disclosure Panel David Mortman, Moderator CSO-in-Residence, Echelon One Paul Proctor, Moderator VP, Gartner Window Snyder, Vendor Director of Ecosystem Development, Mozilla Corporation Ian Robertson CSO, RIM David Maynor CTO, Errata Security Dave Goldsmith Concerns about ethics for security professionals has been on the rise of late. It's time for researchers and vendors to meet up and discuss the issues of ethical behavior in our industry and start setting some guidelines for future research and discussion. Join active analysts, vendors and researchers for a lively discussion.

Remediation and Defensive Strategies

Defenders and researchers are provided actionable defensive mitigations, monitoring telemetry, and configuration safeguards to minimize systemic risk.

Related talks

Main Stage·1 hr 47 min

  • DEF CON
  • Policy
  • Date: Aug 2007
  • Location: Las Vegas

Tobias · Fiddler

Tobias and Fiddler details matt Fiddler & Marc Weber Tobias: High Insecurity: Locks, Lies, and Liability Matt Fiddler leads a Threat Management Team for a Fortune 100 Organization.

vulnerability-disclosuresecurity-ethicscoordination+1

Main Stage·45 min

  • DEF CON
  • Policy
  • Date: Aug 2007
  • Location: Las Vegas

Dead Addict

Dead Addict explores picking up the zero day at DEF CON 15, examining vulnerability-disclosure and practical defenses.

vulnerability-disclosuresecurity-ethicscoordination+1