Congress pushes MITRE to fix CVE program, suggests regular reviews and stable funding

guest · Aug 29, 2018

Congress pushes MITRE to fix CVE program, suggests regular reviews and stable funding
August 27, 2018
https://www.csoonline.com/article/3...gests-regular-reviews-and-stable-funding.html

On Monday, the Energy and Commerce Committee sent letters to MITRE Corporation and the Department of Homeland Security (DHS), recommending some needed changes to the troubled CVE program.

In 1999, MITRE created the CVE database as a means of standardizing the naming convention of disclosed vulnerabilities. However, as Salted Hash reported in 2016, the program has faced several problems, including coverage gaps and bottlenecks.

The hope is that by making the CVE program a PPA rather than a contract award, the CVE program's goals will no longer be dominated by short-term projects, and with stable funding the CVE program itself could be improved.

MITRE and DHS have until September 4, 2018 to brief the Committee about the recommendations made.
Click to expand...

Log in or Sign up

Congress pushes MITRE to fix CVE program, suggests regular reviews and stable funding

guest Guest

Log in or Sign up

Congress pushes MITRE to fix CVE program, suggests regular reviews and stable funding

guest Guest

Useful Searches