Open Source Summit + ELC North America 2020

In a dynamic environment as the computing world, technology changes rapidly and new CVE's are disclosed everyday. In this presentation, Aviv will shed some light over the process of security disclosure from the perspectives of the developers and the researchers.

Aviv will talk about how to prepare your project for a security disclosure and how to handle it. He will elaborate about the implications of handling the process poorly and about scenarios that could have happened because of inadequate security disclosure.

Aviv will talk about some vulnerabilities he found and how he and the developers handled the situations in different ways.

In the end, Aviv will give some tips regarding how to improve the disclosure process from the developer and researcher perspectives while keeping maximum security.