Vulnerability handling activity in JPCERT/CC

FIRST TC Plennary sessions

Wednesday — October 17th, 2007 10:40

One of JPCERT/CC activities is software vulnerability handling. We coordinate (mostly private) vulnerability information among software vendors, and publish vulnerability information and related vendors' responses, very similar to CERT/CC (US-CERT) Vulnerability Notes. We give a brief overview of our activity, and show some experiences on the vendor interaction and publishing activity.

Presenters

• Masaki Kubo (JPCERT/CC, JP)

  Masaki Kubo is a member of Information Coordination Group at JPCERT/CC since 2005. He specializes in vulnerability analysis, handling and the development of vulnerability modelling.