Improving Interoperability in Coordinated Vulnerability Disclosure with Vultron

Coordinated vulnerability disclosure (CVD) begins when at least one individual becomes aware of a vulnerability, but it can’t proceed without the cooperation of many. Software supply chains, software libraries, and component vulnerabilities have evolved in complexity and have become as much a part of the CVD process as vulnerabilities in vendors’ proprietary code. Many CVD cases now require coordination across multiple vendors. In this podcast from the Carnegie Mellon University Software Engineering Institute (SEI), Allen Householder, a senior vulnerability and …

aware complexity component vulnerabilities cooperation coordinated coordinated vulnerability disclosure cvd disclosure interoperability process software software libraries software supply chains supply supply chains vendors vulnerabilities vulnerability vulnerability disclosure vultron