Artwork
iconShare
 
Manage episode 349823084 series 3376008
Content provided by Ivanti: Cybersecurity and Information Technology Solutions, Ivanti: Cybersecurity, and Information Technology Solutions. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by Ivanti: Cybersecurity and Information Technology Solutions, Ivanti: Cybersecurity, and Information Technology Solutions or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://staging.podcastplayer.com/legal.

Daniel, Chris, Amanda and Ashley revisit the coordinated disclosure conversation from Episode 25 and apply the prisoner’s dilemma thought experiment to create a (more?) perfect vendor disclosure policy.

  • Join the conversation online on LinkedIn (linkedin.com/company/Ivanti)
  continue reading

Chapters

1. Prisoner Priorities: Why Disclosure Policies Can’t Please Everyone (00:00:00)

2. The difference between coordinated disclosure and responsible disclosure (00:00:37)

3. Prisoner's dilemma: incentivizing desired behavior for responsible disclosure (00:06:17)

4. Researchers versus vendors (versus customers?!) (00:10:03)

5. Trying to please everyone with a single disclosure policy (00:12:33)

6. The mythically perfect disclosure policy… and how close we can land (00:19:33)

7. Feedback and communication goals for real-world vendor disclosure policies (00:24:05)

52 episodes