This course aims to help learners understand the progress in the Vulnerability Disclosure Debate. By the end of the course, students will be able to analyze survey results, identify best practices for driving adoption, manage expectations, and comprehend the importance of coordinated disclosure. The course teaches skills such as interpreting survey data, brainstorming ideas, managing expectations, and coordinating disclosure. The teaching method involves presenting survey results, discussing best practices, and providing examples to illustrate concepts. This course is intended for individuals interested in cybersecurity, vulnerability disclosure, and best practices in the industry.
Survey Says - Making Progress in the Vulnerability Disclosure Debate
Overview
Syllabus
Intro
The Big Learning
Why
Survey
Survey Monkey Routes
Survey Monkey Responses
Survey Results
Survey Results Communication
Survey Results Expectations
Survey Results Technology Providers
Survey Results Maturity
Why are they doing this
Which best practices are they looking
brainstorm ideas for driving adoption
we didnt want to reopen old wounds
fear of legal reprisal
safety
initial scope
implicit scope
covenant
expectation management
white hat motivations
critical industries
more feedback
how to change management
Coordination Center
Multiparty Disclosure
Special Interest Group
Why coordinated disclosure
General agreement on the model
Complexity
Conflict
Simple Example
Missed Expectations
Multiparty
Incentives
Principles
Human Goals
Feedback
Awareness Adoption Group
How do we get broader adoption
Taught by
BSidesLV
