Disclosing vulnerabilities improves security for everyone

guest · Sep 19, 2019

Disclosing vulnerabilities improves security for everyone
September 19, 2019
https://betanews.com/2019/09/19/disclosing-vulnerabilities-improves-security/

According to a new study 90 percent of IT professionals believe disclosing vulnerabilities serves a broader purpose of improving how software is developed, used and fixed.

The survey from application security testing specialist Veracode finds more than a third of companies received an unsolicited vulnerability disclosure report in the past 12 months, representing an opportunity to work together with the reporting party to fix the vulnerability and then disclose it, improving overall security.

"The alignment that the study reveals is very positive," says Veracode's chief technology officer and co-founder Chris Wysopal. "The challenge, however, is that vulnerability disclosure policies are wildly inconsistent. If researchers are unsure how to proceed when they find a vulnerability it leaves organizations exposed to security threats giving criminals a chance to exploit these vulnerabilities [...]"
But while organizations are committed to finding and fixing flaws, the survey results show that security researchers can sometimes have unrealistic expectations. 65 percent of security researchers expect a fix in less than 60 days.
Click to expand...

Veracode: Security and Development Agree, Coordinated Disclosures Are a Public Service

Log in or Sign up

Disclosing vulnerabilities improves security for everyone

guest Guest

Log in or Sign up

Disclosing vulnerabilities improves security for everyone

guest Guest

Useful Searches