Главная
Study mode:
on
1
Intro
2
Finding the data
3
Data Fundamentalism
4
Misleading Statements
5
The Framework
6
What do they do
7
Whats actually happening
8
Sports analogy
9
What does security look like
10
Vulnerability definitions
11
Data
12
Status Quo
13
One Scanner
14
Duplication
15
Vulnerability Density
16
Remediation
17
Data Analysis
18
Whats Missing
19
CVS and Remediation
20
Precision
21
CVS
22
The Security Mendoza Line
23
Which Vulnerability To Fix
24
Why Not Patch Everything
25
Money Slide
26
Its more than patching
27
Its also expensive
28
Rapid7 web page
29
Success probabilities
30
Selection bias
31
PHP vulnerabilities
32
Age of breach vulnerabilities
33
Exploit kits
34
Vulnerability percentage
35
Outro
Description:
Explore a deep dive into vulnerability and exploit trends through this BSidesLV 2013 conference talk. Analyze data fundamentals, misleading statements, and the framework of security vulnerabilities. Examine vulnerability definitions, density, and remediation strategies. Investigate the Common Vulnerability Scoring System (CVS) and its impact on prioritizing fixes. Learn about the "Security Mendoza Line" concept and why patching everything isn't always feasible. Delve into the economics of security, including costs and success probabilities. Study real-world examples like PHP vulnerabilities, age of breach vulnerabilities, and exploit kits. Gain valuable insights to improve your understanding of cybersecurity trends and data-driven decision-making in vulnerability management.

Vulnerability and Exploit Trends: A Deep Look Inside the Data

Add to list
0:00 / 0:00