Vulnerability Disclosure 101: …so the bearer of bad news doesn’t get killed

Vulnerability Disclosure 101: …so the bearer of bad news doesn’t get killed

HomeAutomotive Security Research GroupVulnerability Disclosure 101: …so the bearer of bad news doesn’t get killed
Vulnerability Disclosure 101: …so the bearer of bad news doesn’t get killed
ChannelPublish DateThumbnail & View CountDownload Video
Channel AvatarPublish Date not found Thumbnail
0 Views
If you would like to learn more about ASRG, watch our short introduction at https://youtu.be/SYbv_B45PCI, visit our website at https://www.asrg.io or contact us directly.

PRESENTATION:

This webinar is primarily aimed at the security research community to provide guidance on their contribution to the ASRG Vulnerability Disclosure Program, a project designed to support responsible disclosure when direct communication with vendors is not possible for any reason.

The brief presentation is intended to serve as a guide for researchers in formatting vulnerability disclosure documentation. This documentation:

• increase the efficiency of communication between the parties,

• reduce the time for authors to complete their work and

• support manufacturers in appropriately assessing and resolving the vulnerabilities discovered.

SPEAKERS:

Jani Kovacs | CYMOTIVE Technologies

Jani has spent his entire career in the transportation industry. Since 2019, he has specialized in securing automotive products as a risk analyst and solution architect, where he has become familiar with the E2E lifecycle of automotive cybersecurity.

As a tutor in his area of expertise, he created the material for several corporate and university courses on testing and cybersecurity, and also published an open source fighting fantasy game on automotive safety.

Prior to Cymotive, Jani helped build the cybersecurity team of a German Tier 1 company based in Hungary, played a key role in achieving the required UNECE compliance and subsequently helped develop and implement the global vulnerability and incident management process of a German OEM.

PRESENTATION FILE:
https://garage.asrg.io/webinars/vulnerability-disclosure-101-to-not-get-the-messenger-killed/

Please take the opportunity to connect with your friends and family and share this video with them if you find it useful.