
Sign up to save your podcasts
Or


Software vulnerability coordination at the CERT Coordination Center (CERT/CC) has traditionally relied on a hub-and-spoke model, with reports submitted to analysts at the CERT/CC analysts who would then work with contact affected vendors. To scale communications and increase the level of collaboration between vulnerability reporters, coordinators, and software vendors, the CERT/CC team has created a web-based platform for software vulnerability reporting and coordination called the Vulnerability Information and Coordination Environment (VINCE). In this SEI Podcast, Emily Sarneso, the architect of VINCE, and Art Manion, technical manager of the Vulnerability Analysis Team in the SEI's CERT Division, discuss the rollout of VINCE, how to use it, and future work in vulnerability coordination.
By Members of Technical Staff at the Software Engineering Institute4.5
1818 ratings
Software vulnerability coordination at the CERT Coordination Center (CERT/CC) has traditionally relied on a hub-and-spoke model, with reports submitted to analysts at the CERT/CC analysts who would then work with contact affected vendors. To scale communications and increase the level of collaboration between vulnerability reporters, coordinators, and software vendors, the CERT/CC team has created a web-based platform for software vulnerability reporting and coordination called the Vulnerability Information and Coordination Environment (VINCE). In this SEI Podcast, Emily Sarneso, the architect of VINCE, and Art Manion, technical manager of the Vulnerability Analysis Team in the SEI's CERT Division, discuss the rollout of VINCE, how to use it, and future work in vulnerability coordination.

273 Listeners

623 Listeners

375 Listeners

163 Listeners

638 Listeners

284 Listeners

8,008 Listeners

178 Listeners

189 Listeners

202 Listeners

0 Listeners

0 Listeners

137 Listeners

46 Listeners

59 Listeners

588 Listeners

77 Listeners