Understanding the Impact of Critical Vulnerabilities in Critical Infrastructure: A De...
summary
Detailed account of techniques and outcomes: nine-month coordination for a flaw hitting 27 RTOSes, an emergency directive after Log4j active exploitation, use of GitHub enumeration to map affected devices, handling about 150 concurrent cases, public advisories for a ventilator bug and an aftermarket GPS that allows remote shutdown, and deployment of the Vince platform plus CNAs, SBOM, CSAF and VEX to speed vulnerability triage and supply-chain visibility.
AI-written summary · about
chapters (10)
- 0:00Intro
- 0:44What are the things
- 1:34What is our Ecosystem?
- 7:16Some Examples
- 13:28What if is is everywhere?
- 15:39What if they get media attention?
- 17:08What if it is in Medical Devices?
- 18:37What if it is based on an open standard?
- 25:08Policies, Processes, Paperwork
- 28:53References and Resources
related talks
11mVulnerability Supply Chains
52mAnatomy of a Vulnerability Response - A View from the Inside
58mAttacking through the Software Supply Chain
44mNight of the living vulnerabilities
32mBuilding a secure future using DEVSECOPS practices and technologies
33mFrom Boardrooms to Polling Places: Securing Critical Infrastructure in 2024
23mHitchhikers' Guide to the Vulniverse
39mCVE 101: The Unfolding Of A Zero Day Attack