Hi guys, Welcome to the Advanced Video Search Engine, and you are watching CSAF 2.0 - A New Start to Automate Advisories. That video is uploaded by FIRST at 2021-06-17T14:21:53-07:00. We are promoting this video only for entertainment and educational purpose only. So, I hope you like & enjoy it. [OMc8KJ6XVRI]
| Name | CSAF 2.0 - A New Start to Automate Advisories |
| Video Uploader | Video From FIRST |
| Upload Date | This Video Uploaded At 17-06-2021 21:21:53 |
| Video Discription | Speaker: Thomas Schmidt (CERT Bund, DE) It is not a novel insight that the number of discovered and treated vulnerabilities is constantly rising. As more vendors are dealing with coordinated vulnerability disclosure (CVD) also the number of security advisories rises. However, these advisories have to be processed by each customer individually to evaluate the cyber risk for their environment. This process is time and resource intensive. The talk presents the Common Security Advisory Framework (CSAF) Version 2.0 that supersedes the XML-based CSAF Common Vulnerability Reporting Framework (CVRF) 1.2. CSAF 2.0 is a JSON-based format for security advisories that will aid in automation of the process on both ends – advisory issuers as well as asset owners. CSAF 2.0 was developed in an international joined effort as open standard under the umbrella of the OASIS Open Foundation. Why should you care? Most vendor have suppliers and need to look into supply chain issues. CSAF 2.0 provides a benefit through automation. About the Speaker Thomas Schmidt works in the ‘Industrial Automation and Control Systems' section of the German Federal Office for Information Security (BSI). He was BSI’s analyst for TRITION/TRISIS/HatMan and developed, together with partners, a rule set for Recognizing Anomalies in Protocols of Safety Networks: Schneider Electric‘s TriStation (RAPSN SETS). His focus is the automation of advisories at both sides: vendors/CERTs and asset owners. To increase security of ICS, BSI responsibilities cover many areas including establishing trust and good relations with vendors and asset owners. BSI also conducts committee and standardization work (ISA99 and IEC 62443) and works with academia to improve education in ICS cyber security. Mr. Schmidt completed his masters in IT-Security at Ruhr-University Bochum (Germany) which included a period of research at the SCADA Security Laboratory of Queensland University of Technology (Brisbane, Australia). OMc8KJ6XVRI |
| Category | Science & Technology |
| Tags | Science & Technology Download MP4 | Science & Technology Download MP3 | Science & Technology Download MP4 360p | Science & Technology Download MP4 480p | Science & Technology Download MP4 720p | Science & Technology Download MP4 1080p |
