The Birds, the Bees, and the CVEs - Understanding Novel Vulnerabilities in Critical Infrastructure

Explore the challenges and techniques used to assess the impact of product vulnerabilities on critical infrastructure sectors in this 26-minute conference talk from BSidesLV. Gain insights into strategies for understanding the risks associated with new and novel vulnerabilities, particularly in control systems and medical devices. Learn how asset owners can better comprehend potential impacts on the larger ecosystem and affected critical infrastructure sectors. Discover different approaches to evaluating risk and gain a fresh perspective on the timing of vulnerability introduction and coordinated vulnerability disclosure. Presented by Iain Deason, this talk offers valuable knowledge for professionals involved in cybersecurity and critical infrastructure protection.