“The CWE Program: Current State and Road Ahead” presentation — “An overview of the CWE Program’s current efforts to implement its federation strategy to increase program coverage and adoption. This includes efforts to modernize CWE Program infrastructure (e.g., deploying a REST API), federate CWE content development (e.g., launch the CWE Content Development Repository (CDR) to provide a platform for program partners to collaborate transparently on CWE content development), and an overview of the CWE community working groups/special interest groups and what they are trying to accomplish.”
“Enabling Accurate, Decentralized Root Cause Mapping at Scale” discussion panel — “Root cause mapping is the identification of the underlying cause of a vulnerability. The Root Cause Mapping Working Group (RCM WG) was established by CVE and CWE community stakeholders with the purpose of determining how to improve and scale accurate root cause mapping. Specifically, the working group is exploring the feasibility of an effective decentralized root cause mapping ecosystem to enable trend analysis and risk management. This moderated discussion panel with members of the RCM WG covered the value, challenge, and potential for accurate and decentralized root cause mapping at scale.”
Thank you so much to everyone who attended our RCM discussion panel and CWE talk at the first-ever VulnCon conference. We are already looking forward to next year’s event!
February 29, 2024 | Share this article