Understanding Vulnerability Data

Presented at Kernelcon 2023, April 14, 2023, 4 p.m. (20 minutes).

Vulnerability data is some of the most critical yet confusing data in the security industry. This talk will demystify where this data comes from, who produces it, and its usage. We will follow a vulnerability from discovery to reporting to being published as a CVE while explaining who is involved in each step and their role.

Presenters:

• Jerry Gamblin
  Jerry Gamblin is a security researcher and analyst focusing on network and application security with over 20 years of experience. His research has been presented on numerous blogs, podcasts, and security conferences. When not at work, his personal research focuses on IoT & embedded automotive systems.

Similar Presentations:

• BruCON 0x08 (2016) / Hacking KPN: Lessons from the trenches
• DEF CON 10 (2002) / The Politics of Vulnerabilities