How Red Hat's Active Participation Helps Improve the CVE Program

Shannon Sabens of CrowdStrike chats with Peter Allor, Fábio Olivé, and Martin Prpic of Red Hat, which is a long-time CVE Numbering Authority (CNA). The benefits of actively participating as a member of the CVE community are discussed, especially in the CVE Working Groups, which allows Red Hat to directly contribute to enhancing CVE automation and quality, as well as strategic planning for future improvements. Specific topics include Red Hat being a resource for other CNAs, particularly for open-source vendors and projects; the industry-wide value of the upcoming CVE Record JSON Schema to be a universal vulnerability representation; automation of CNA processes and the upcoming release of CVE Services 2.0; Red Hat’s development of a free API, cvelib, for use by all CNAs that can help them interact with the automated services; and more. CVE® - Red Hat - CrowdStrike - CVE Working Groups - How to become a CNA -

You can listen to How Red Hat's Active Participation Helps Improve the CVE Program online on Radio and Podcast. Open the player on this page to stream the available audio.

How Red Hat's Active Participation Helps Improve the CVE Program is an episode from We Speak CVE by CVE Program.

This episode is 24:06 long.

This episode was published on Nov 20, 2021.

Yes. Use the heart button on the episode page to add it to your favorite episodes list.

Yes. This page shows related episodes from We Speak CVE when more episodes are available from the podcast feed.