Vulnerability Disclosure Panel
David MortmanPaul ProctorWindow SnyderIan RobertsonDavid MaynorDave Goldsmith
David Mortman and Paul Proctor explores vulnerability disclosure panel at DEF CON 15, examining vulnerability-disclosure and practical defenses.
Summary
Architecture and Background
Panel: Disclosure Panel David Mortman, Moderator CSO-in-Residence, Echelon One Paul Proctor, Moderator VP, Gartner Window Snyder, Vendor Director of Ecosystem Development, Mozilla Corporation Ian Robertson CSO, RIM David Maynor CTO, Errata Security Dave Goldsmith Concerns about ethics for security professionals has been on the rise of late. David Mortman, Paul Proctor, Window Snyder, Ian Robertson, David Maynor, Dave Goldsmith contextualize these mechanics within the broader policy landscape.
Vulnerability Analysis
The technical analysis investigates threat vectors and design shortcomings related to vulnerability-disclosure, security-ethics, coordination, responsible-disclosure.
Exploitation and Demonstrations
Panel: Disclosure Panel David Mortman, Moderator CSO-in-Residence, Echelon One Paul Proctor, Moderator VP, Gartner Window Snyder, Vendor Director of Ecosystem Development, Mozilla Corporation Ian Robertson CSO, RIM David Maynor CTO, Errata Security Dave Goldsmith Concerns about ethics for security professionals has been on the rise of late. It's time for researchers and vendors to meet up and discuss the issues of ethical behavior in our industry and start setting some guidelines for future research and discussion. Join active analysts, vendors and researchers for a lively discussion.
Remediation and Defensive Strategies
Defenders and researchers are provided actionable defensive mitigations, monitoring telemetry, and configuration safeguards to minimize systemic risk.
Related talks
Main Stage·1 hr 47 min
Tobias · Fiddler
Tobias and Fiddler details matt Fiddler & Marc Weber Tobias: High Insecurity: Locks, Lies, and Liability Matt Fiddler leads a Threat Management Team for a Fortune 100 Organization.
Main Stage·50 min
Granick
Granick explores disclosure and intellectual property law 2006 - 2007 at DEF CON 15, examining vulnerability-disclosure and practical defenses.
Main Stage·45 min
Dead Addict
Dead Addict explores picking up the zero day at DEF CON 15, examining vulnerability-disclosure and practical defenses.


