Improving Interoperability in Coordinated Vulnerability Disclosure with Vultron

Coordinated vulnerability disclosure (CVD) begins when at least one individual becomes aware of a vulnerability, but it can’t proceed without the cooperation of many. Software supply chains, software libraries, and component vulnerabilities have evolved in complexity and have become as much a part of the CVD process as vulnerabilities in vendors’ proprietary code. Many CVD cases now require coordination across multiple vendors. In this podcast from the Carnegie Mellon University Software Engineering Institute (SEI), Allen Householder, a senior vulnerability and …

aware carnegie mellon carnegie mellon university cases code complexity component vulnerabilities cooperation coordinated coordinated vulnerability disclosure cvd disclosure engineering interoperability podcast process software software engineering software supply chains supply supply chains university vendors vulnerabilities vulnerability vulnerability disclosure vultron