CNA Birds of a Feather: Open Forum with Certified Numbering Authorities
summary
Panelists trace CVE evolution from a handful of manual assignments to a federated system that now lists 450 CNAs, produces about 108 CVEs/day and logged ~40,000 CVEs in 2024. They describe tooling and process changes — federation after 2016, REST APIs, and the web client Vulnerogram/Vulnigram used for onboarding — note lingering quality debates about over-reporting and explain governance routes for removing or remediating problematic CNAs.
AI-written summary · about
chapters (15)
- 0:00CNA Birds of a Feather intro
- 1:05CVE program background
- 3:51CVE origins and history
- 8:54Scott Moore’s CVE role
- 11:44CVE program evolution
- 18:08Early CVE decentralized practices
- 20:15CVE community in 2016
- 23:05Modern CVE growth stats
- 26:35Open forum and audience questions
- 32:14CVE assignment quality
- 36:52Dispute handling paths
- 39:52CNA engagement with CVE
- 44:10CVE standards enforcement
- 47:18New CNA tooling
- 49:45Closing remarks
related talks
51mPanel Discussion: It is a Tale as Old as Time…. a CNA, the NVD, and a CVE Consumer Walk Into a ...
57mPanel Discussion: This One Time at CVD Camp
53mCNA Feedback Session to the CVE Program
45mFuture of CVE
01h 00mThe CVE Program Quality Era: Strengthening Trust and Impact In Global Vulnerability Data
37mGoverning Global Vulnerabilities: Standards for Open Source Resilience
33mCVE Decaf: Brewing Better and More Actionable Data Quality
24mCNA Challenges From a National CERT Perspective