Security Proposal Nearly Ready for Inspection
A group of software and security vendors that is at work on a standard for disclosing security vulnerabilities hopes to have a completed document ready for public inspection within a month.A group of software and security vendors that is at work on a standard for disclosing security vulnerabilities hopes to have a completed document ready for public inspection within a month. The group, known as the Organization for Internet Safety, has been working on the proposal for several months and submitted a preliminary version of it to the Internet Engineering Task Force in February. The proposals authors eventually withdrew the paper from IETF consideration after the standards body decided it wasnt the appropriate place for the document. Its unclear where the final proposal will land, but if the OIS cant find a suitable forum, it may create one.
The OIS also recently has spent quite a bit of time and effort trying to get its various member companies to approve a set of bylaws, said Scott Blake, vice president of information security at BindView Corp., a Houston-based security vendor and one of the founding members of the OIS. There has been some disagreement about the way the group will handle its members intellectual property, but most of those issues have been resolved.