Explore the progress made in vulnerability disclosure debates through Allan Friedman's comprehensive conference talk at BSidesLV 2016. Delve into survey results, common ground, and key learnings in the field of cybersecurity. Examine communication strategies, expectations, and the role of technology providers in vulnerability disclosure. Analyze maturity levels, best practices, and motivations behind disclosure practices. Discuss critical industries, legal concerns, and scope management. Investigate coordinated disclosure models, multiparty scenarios, and incentives. Learn about principles, human goals, and strategies for broader adoption of effective vulnerability disclosure practices. Gain insights into the complexities and challenges faced in the cybersecurity landscape, and discover potential solutions for improving vulnerability management across various sectors.
Survey Says - Making Progress in the Vulnerability Disclosure Debate