NANOG Meeting Presentation Abstract

The National Infrastructure Assurance Council (NIAC) Vulnerability Disclosure Framework and What It Might Mean to the ISP Community
Meeting:	NANOG28
Date / Time:	2003-06-02 10:45am - 11:00am
Room:	Seasons Ballroom
Presenters:	Speakers: Jim Duncan, Cisco Systems Jim Duncan works in the Critical Infrastructure Assurance Group at Cisco Systems, where he is a topic expert on incident response, vulnerability handling, and cyberthreat assessment. Previously, Jim was an Incident Manager for the Cisco Systems Product Security Incident Response Team (PSIRT) for four years, where he handled customer security and product security vulnerabilities. In addition to his work with the NIAC Vulnerability Disclosure WG, Jim currently works on proactive issues supporting other incident response teams within Cisco. He is authoring an internal policy for information sharing, and he actively contributes to external projects for several Information Sharing and Analysis Centers (ISACs). In the background is a project to adapt \"Inter-NOC Dial By ASN\" technology for inter-ISAC communications. Jim contributed to RFC 1244, the Site Security Policy Handbook, co-authored a tutorial on building an incident response team for USENIX, and is a Liaison Member of the Forum of Incident Response and Security Teams. Prior to Cisco, Jim worked for Penn State University. He attended his first NANOG meeting at NANOG8, October 1996, in Ann Arbor. Paul Vixie, ISC.
Abstract:	The National Information Advisory Council (NIAC) was formed by executive order in September 2002 and is charged with advising the US Department of Homeland Security and the President regarding the security of information systems and networks essential to the nation\'s critical infrastructure. A key task in front of the NIAC is to provide guidance on disclosing vulnerabilities, and a working group has been created to establish a framework for vulnerability disclosure to include specific recommendations to the President. As part of its outreach and information-gathering efforts, the working group is presenting a brief overview of the project during the Monday morning General Session. Interested attendees are invited to contribute further via a dialog during the ISP Security BOF at 7:30 Monday evening.
Files:	Jim Duncan Presentation(PDF) The National Infrastructure Assurance Council (NIAC)
Sponsors:	None.

Back to NANOG28 agenda.

NANOG28 Abstracts

• Show All

• BGP Multihoming Techniques
  Speakers:
  Philip Smith, Cisco Systems;

• Deploying Interdomain IP Multicast
  Speakers:
  Mike McBride, Cisco Systems;

• Introduction to MPLS
  Speakers:
  Joe Soricelli, Juniper;

• Interception Technology: The Good, The Bad, and The Ugly!
  Speakers:
  Jeff Schiller, MIT;

• The National Infrastructure Assurance Council (NIAC) Vulnerability Disclosure Framework and What It Might Mean to the ISP Community
  Speakers:
  Jim Duncan, Cisco Systems; Paul VixieISC; .
  

• The National Infrastructure Assurance Council (NIAC) Vulnerability Disclosure Framework and What It Might Mean to the ISP Community
  Speakers:
  Jim Duncan, Cisco Systems; Paul VixieISC; .
  

• IPv4/IPv6 Dual-Stack on Abilene
  Speakers:
  Grover Browning, Indiana University;

• Research Forum: Inter-provider Coordination for Real-Time Tracebacks
  Speakers:
  Kathleen M. Moriarty, MIT;

• Research Forum: Achieving Record Speed Trans-Atlantic End-to-end TCP Throughput
  Speakers:
  Les CottrellStanford University; .
  

• ISP Security: Deploying and Using Sinkholes
  Speakers:
  Barry Raveendren GreeneCisco Systems; .
  Danny McPhersonArbor Networks; .
  

• ISP Security: Deploying and Using Sinkholes
  Speakers:
  Barry Raveendren GreeneCisco Systems; .
  Danny McPhersonArbor Networks; .
  

• Issues in IPv6 Deployment
  Speakers:
  Jeff Doyle, Juniper;

• XML-based Network Management Tools
  Moderators:
  Rob Enns, Juniper;

• @Home Cable Backbone Deployment Experiences
  Speakers:
  Cathy WittbrodtNone; .
  

• Bidirectional Forwarding Plane Deadness Detection
  Speakers:
  Dave WardCisco Systems; .
  Dave KatzJuniper Networks; .
  

• Bidirectional Forwarding Plane Deadness Detection
  Speakers:
  Dave WardCisco Systems; .
  Dave KatzJuniper Networks; .
  

• BGP Vulnerability Testing: Separating Fact from FUD
  Speakers:
  Sean Convery, Cisco Systems; Matthew Franz, Cisco Systems;

• BGP Vulnerability Testing: Separating Fact from FUD
  Speakers:
  Sean Convery, Cisco Systems; Matthew Franz, Cisco Systems;

• NRIC Best Practices for ISP Security
  Speakers:
  Ross Callon, Juniper;

• Implementation of ARIN\'s Lame DNS Delegation Policy
  Speakers:
  Ed Lewis, ARIN;

• MPLS-Based Synchronous Traffic Shunt
  Speakers:
  Yehuda Afek, Riverhead; Roy BrooksCisco Systems; .
  Nicolas Fischbach, COLT Telecom;

• MPLS-Based Synchronous Traffic Shunt
  Speakers:
  Yehuda Afek, Riverhead; Roy BrooksCisco Systems; .
  Nicolas Fischbach, COLT Telecom;

• MPLS-Based Synchronous Traffic Shunt
  Speakers:
  Yehuda Afek, Riverhead; Roy BrooksCisco Systems; .
  Nicolas Fischbach, COLT Telecom;

• BGP AS Number Exhaustion
  Speakers:
  Geoff HustonTelstra, author; .
  K ClaffyCAIDA; .
  

• BGP AS Number Exhaustion
  Speakers:
  Geoff HustonTelstra, author; .
  K ClaffyCAIDA; .