- Jan 18, 2022 6:47 pm GMT
The Log4j vulnerability that affected so many in the energy industry has highlighted the need to automate software vulnerability reporting by software vendors and enable software consumers to rapidly perform risk assessments whenever a new software vulnerability is reported. The existing "Security Bulletin", "read em and weep" approach is too inefficient, leaving our critical infrastructures vulnerable to cyber breaches over long periods of time. Automation is key to success - the only problem is "which vulnerability reporting format to use"? This article describes the various options available to report software vulnerabilities.
No discussions yet. Start a discussion below.
Get Published - Build a Following
The Energy Central Power Industry Network is based on one core idea - power industry professionals helping each other and advancing the industry by sharing and learning from each other.
If you have an experience or insight to share or have learned something from a conference or seminar, your peers and colleagues on Energy Central want to hear about it. It's also easy to share a link to an article you've liked or an industry resource that you think would be helpful.