"This web page provides details on the NTIA-convened multistakeholder process concerning collaboration between security researchers and software and system developers and owners to address security vulnerability disclosure.
"The first meeting will be on September 29, 2015 at the University of California, Berkeley, School of Law. This meeting will be open to all interested parties. The meeting will be webcast, and NTIA will provide a dial-in conference bridge. Pleasepre-register hereto help NTIA plan logistics. Pre-registration is not required, but will assist NTIA in planning, and in determining space and webcast technology requirements.
"On March 19, 2015, the National Telecommunications and Information Administration, working with the Department of Commerce’s Internet Policy Task Force (IPTF), issued aRequest for Commentto “identify substantive cybersecurity issues that affect the digital ecosystem and digital economic growth where broad consensus, coordinated action, and the development of best practices could substantially improve security for organizations and consumers.” Individuals and entities from across the commercial, academic, and civil society sectorsfiled comments. After reviewing these comments, NTIAannouncedthat the first topic to be addressed would be collaboration on vulnerability research disclosure.
"The goal of this process will be to develop a broad, shared understanding of the overlapping interests between security researchers and the vendors and owners of products discovered to be vulnerable, and to establish a consensus about voluntary principles to promote better collaboration. The question of how vulnerabilities can and should be disclosed will be a critical part of the discussion, as will how vendors receive and respond to this information. However, disclosure is only one aspect of successful collaboration.
September 29, 2015
Booth Auditorium at the University of California, Berkeley, School of Law, Boalt Hall, Bancroft Way and Piedmont Avenue, Berkeley, CA. 9am-3pm PDT Dial-in information: to be announced.