Appendix B. Key Resources
Vulnerability Disclosure and Tracking
Following is a list of online resources which may help you in tracking the vulnerability specific to the vendor information system. Many of these websites are best known for their open vulnerability disclosure program, so you are free to contribute your vulnerability research with any of these public/private organizations. Some of them also encourage a full-disclosure policy based on paid incentive program to reward the security researchers for their valuable time and efforts they put in vulnerability investigation and development of proof-of-concept (PoC) code.
- The Open Source Vulnerability Database: http://www.osvdb.org/
- Public Vulnerabilities, Mailing Lists, Security Tools: http://www.securityfocus.com/ ...
Get BackTrack 4: Assuring Security by Penetration Testing now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
