'VulnCon 2024 - Call for Papers': NOW OPEN

The Forum of Incident Response and Security Teams (FIRST) and the CVE Board are pleased to announce a joint conference focused on the critical vulnerability management ecosystem. This new conference seeks to assemble experts from across the numerous standards/frameworks groups, tools, and incident response teams related to the pursuit of identifying, classifying, remediating, and disclosure of vulnerabilities to the industry.

The goal of the conference is to understand what important stakeholders and programs are doing within the vulnerability management ecosystem and best determine how to benefit the ecosystem broadly. This conference will be a hybrid - virtual and in-person event.

WHEN: Monday, March 25 through Wednesday, March 27, 2024.

LOCATION: North Carolina State University, McKimmon Center 1101 Gorman Street Raleigh, NC, 27606

We are seeking individuals to submit abstracts for talks, panels, birds-of-a-feather sessions all related to the following topics:

• Vulnerability Identifiers (CVE, et. al.) including required data elements, formats, tooling, interoperability
• Vulnerability Advisory frameworks (CSAF, OSV, etc.) including required data elements, formats, tooling, interoperability
• Vulnerability Assessment frameworks (CVSS, CWE, EPSS, KEV, VEX, etc.) including data elements, formats, tooling, assessment techniques
• Coordinated Vulnerability Disclosure (CVD) tools, techniques, best practices
• Vulnerability databases
• Publication, dissemination, and integration of Software Bills of Material (SBoM) and Vulnerability EXchange (VEX) statements
• Tools, techniques, and best practices around supply chain vulnerability management and incident response programs that help ensure optimal visibility into the threat landscape around hardware or software vulnerabilities
• Research, tooling, and techniques related to identifying and eliminating whole classes of vulnerabilities

Any interested persons can submit their abstract here: https://easychair.org/my/conference?conf=vc24 no later than January 31, 2024. This event is certain to be lively as we collaborate across the energetic communities that help consumers and the whole ecosystem understand and react to vulnerabilities and their associated threats.

Thank you,

The VulnCon 2024 Committee Chairs Josh, Pete, MegaZone

This newsletter was made possible by the contributions of Team members, Liaisons, FIRST staff, and Board members: The VulnCon 2024 Committee Chairs.