Episode Thumbnail
Episode 9  |  01:10:15 hours

Establishing Defender Advantage w/ Cyentia Institute

Episode 9  |  01:10:15 hours  |  06.02.2021

Establishing Defender Advantage w/ Cyentia Institute

00:00
00:00
This is a podcast episode titled, Establishing Defender Advantage w/ Cyentia Institute. The summary for this episode is: <p>We tackle a hotly contested debate as old as cybersecurity itself: does releasing exploit code do more harm than good?</p>
Takeaway 1 | 01:33 MIN
Intros & Revealing Dr. Edward's Source Code
Takeaway 2 | 01:14 MIN
Picking Up Where Volume 6 Left Off
Takeaway 3 | 04:24 MIN
P2Pv7 Data Sources
Takeaway 4 | 01:03 MIN
TLDR: Results of 3 Hypothesis Tested
Takeaway 5 | 02:14 MIN
Public Exploit Code Existing Is What Matters
Takeaway 6 | 04:16 MIN
Hypothesis 1: Releasing Exploit Code Early Leads to Earlier Remediation
Takeaway 7 | 02:34 MIN
Hypothesis 1 Rejected
Takeaway 8 | 05:32 MIN
Hypothesis 2: Releasing Exploit Code Early Leads to Earlier Detection
Takeaway 9 | 05:30 MIN
New Idea Exploit Escrow Services
Takeaway 10 | 02:47 MIN
Hypothesis 3: Releasing Exploit Code Early Leads to Earlier Exploitation
Takeaway 11 | 00:44 MIN
Public Exploit Code Correlates to 15X Exploitation Activity
Takeaway 12 | 01:01 MIN
When Public Exploit Code Exists & It's An RCE = 30X Exploit Activity
Takeaway 13 | 03:48 MIN
Correlation & Impact to Coordinated Disclosure
Takeaway 14 | 05:55 MIN
Vendor Popularity & Exploitation Rates
Takeaway 15 | 04:44 MIN
Kenna's Unmagic Quadrant
Takeaway 16 | 05:16 MIN
Plotting Remediation vs. Exploit Activity for 24 Vendors
Takeaway 17 | 04:35 MIN
Go Home CVSS, You're Drunk
Takeaway 18 | 02:20 MIN
Attacker/Defender Advantage Per Vendor
Takeaway 19 | 08:51 MIN
Takeaways From Ed/Jay/Michael

We tackle a hotly contested debate as old as cybersecurity itself: does releasing exploit code do more harm than good?

More Episodes

How CIOs Get Things Done

Counting CVEs

Vulnerability Disclosure and Responsible Exposure

Risk, Measured: 7 Characteristics of Good Metrics

Why Vulnerability Scores Can’t Be Looked At In A Vacuum

More Blue Team Voices