Birds of a Feather (BoF) Schedule

Members of the FIRST Membership Committee will give a presentation about the application process and answer questions. Any team or liaison who is interested in FIRST membership should attend.

Duration - 30 mins plus Q&A

Stakeholder-Specific Vulnerability Categorization (SSVC) is a new proposed way to understand and manage vulnerabilities in a holistic way. This prioritization technique attempts to increase clarify of a vulnerability's impact that will lead to proper allocation of an organization's limited resources to address vulnerabilities. Today's organization has a complex number of stakeholders impacted by vulnerabilities, their roles and their decisions require an overlapping visibility into the vulnerability at hand. SSVC also tries to provide flexibility to this multiple stakeholders with a decision tree approach.

This BoF session is all about finding out how practical is SSVC? Can SSVC provide stakeholders with appropriate decision given their succinct visibility into the enterprise? How as SSVC helped one or more organizations with specific examples of vulnerabilities that have caught the recent news? Can mall, medium and large enterprises all benefit from SSVC? Are there target organizations and stakeholders that SSVC is not appropriate for? and why?

INTERPOL will formulate a proposal to create a Special Interest Group (SIG) to discuss law enforcement issues with the FIRST community. The proposed Law Enforcement SIG aims to enable contact and exchange of experience and best practices between FIRST members within law enforcement and members from other private and public sectors, so as to foster better mutual understanding on work relating to the prevention and disruption of cybercrime and other cyber threats.

Main areas for engagement and discussion within the SIG include:

• Modalities for collaboration and coordination of joint disruption operations between law enforcement and other entities
• Threat assessment and notification process within private entities and non-law enforcement public entities (CSIRTs)
• Understanding modi operandi of threat actors and how CSIRT and law enforcement can better align efforts to disrupt these actors

Presenters Ms LEE Pei Ling Head Cyber Strategy & Capabilities Development, Cybercrime Directorate, INTERPOL

Mr Shane CROSS Acting Head Cybercrime Intelligence Unit, Cybercrime Directorate, INTERPOL

Messaging, Malware and Mobile Anti-Abuse Working Group (M3AAWG) created a trusted environment and process to facilitate conversation between cybersecurity practitioners who are charged with managing takedowns of abusive material on their networks following the 2019 Christchurch, New Zealand mass shooting.

The purpose of a recently created guide is to outline the enforcement process in the event any organization becomes aware of Abhorrent and/or Violent Content hosted on their network(s) which falls under, but not limited to any regulations applicable to your organization or any policies you may have for your clients. This guide is intended to be used as a guide containing steps organizations may take into consideration when developing their Abhorrent and/or Violent Content Takedown procedures.

M3AAWG is hosting a BoF looking for feedback to its current document and also looking to FIRST and its members to assist in the creation of the process, but also the network of companies willing to help rid the Internet of Abhorrent and/or Violent Content.