Flaw finders to software makers: It's payback time

TalkBack 10 of 34:

Next »

« Previous

• Thread View
• Flat View

The organization's purpose...

... would be to receive word of vulnerabilities, confirm them, and monitor the process of producing the needed repairs.
As a biproduct, reports on incidents observed and responses and other topics of interest could be produced.

There are organizations now which have similar functions. The problem is only obtaining sufficient prominence that their statements are publicized outside the ingrown (you're right) group of people who are most interested.

Given that the function of the organization is observe, confirm, monitor, count (and publicize) it should be possible for this organization to be accepted, even by the players you don't trust.

The only advantage over the current situation needed is the greater prominence for the organization obtained because all the main groups in the industry accept it and defer to it.

The next time you see a Federal agency's warning listed on the front page, you too can wonder why that sort of announcement isn't a weapon in the industry's everyday strategy against vulnerabilities.

Posted by: Anton Philidor   Posted on: 08/17/06 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• VMware Infrastructure: A Guide to Bottom-Line Benefits VMware Frustrated by the costs of maintain ever larger data centers?or building ... Download Now
• Open Standards Technologies Provide the Ingredients for Delivering Security Across the Papa Gino's Enterprise Dell Papa Gino's Holdings Corporation founded by the entrepreneur operates one ... Download Now
• Why Isn't Server Virtualization Saving Us More? A Few Small Changes May Dramatically Increase Your Efficiency VMware Companies have rapidly adopted server virtualization over the past few ... Download Now