Remediation

Abstract

While the cyber security community struggles with identifying vulnerabilities, classifying them, and providing remediation, vendors have taken on the problem with their own methodologies, service-level agreements, and public disclosure policies. As we have seen, it is one thing to identify a vulnerability and an entirely different problem to apply a remediation or mitigation strategy. To compound the problem, vendor implementations of public disclosure vary greatly, and the technologies they implement, even on similar platforms, to deploy security patches are not always consistent. To that end, we need to look at the leading vendors first and their patch remediation strategies and disclosure schedules.