RE: CVE Information Sources & Scope

["Mann, Dave" <damann@mitre.org>]

>editorial-board-list@lists.mitre.org] On Behalf Of Williams, James K
>Good points, Art.  In particular, quicker issuance of CVE identifiers would be
>great.

I triple promise that we're going to have the speed of issuance discussion.   Promise.



>As far as monitoring of twitter and blogs goes, we also need to consider
>monitoring:
>* pastebin,
>* smaller vendor bugtracking systems (I find vulns every week, in widely
>used software, that never makes it to BugTraq, Secunia, or CVE),
>* discussion forums (in a variety of languages, and many require
>registration),
>* reddit,
>* IRC,
>* and whatever other communication/dissemination mediums become
>popular (again) next month.
>
>When expanding monitoring of these types of sources, extensive
>automation is necessary.

James, could you talk more about automation techniques for monitoring these sources?



-Dave
==================================================================
David Mann | Principal Infosec Scientist | The MITRE Corporation
------------------------------------------------------------------
e-mail:damann@mitre.org | cell:781.424.6003
==================================================================