Open Source Vulnerability Database: Difference between revisions

Content deleted Content added
Sharpen category.
No edit summary
Line 2:
 
==History==
The project was started in August [[2002]] at the [[Blackhat]] and [[DEF CON]] Conferences by several industry notables (including [[H. D. Moore]], rain.forrest.puppy, and others). Under mostly-new management, the database officially launched to the public on [[March 31]], [[2004]].
 
The [[Open Security Foundation]] (OSF) was created to ensure the project's continuing support. [[Brian Martin]] AKA Jericho, [[Chris Sullo]] AKA Sullo of Nikto fame, and [[Jake Kouns]] are project leaders for the OSVDB project, and currently hold leadership roles in the OSF.
 
==Mission==
Its goal is to provide accurate, unbiased information about security vulnerabilities in computerized equipment. The core of OSVDB is a relational database which ties various information about security vulnerabilities into a common, cross-referenced data source.
 
==Process==
Vulnerability reports, advisories and exploits posted in various security lists enter the database as a new entry. The new entry contains only a title and links to entries of the same vulnerability in other security lists. However, at this stage the page for the new entry doesn't contain any detailed description of the vulnerability. After the new entries are thoroughly scrutinized, analyzed and refined by us, we add vulnerability description, technical description, solution description, manual testing notes, etc. Then these details are reviewed by other members of '''OSVDB''', further refined if necessary and then made stable. Once it is stable, the detailed information appears on the page for the entry.
 
==Contributors==
Some enthusiastic hackers are volunteering to maintain '''OSVDB'''. Some of the active members are as follows:
 
* [[H. D. Moore]]
* [[Jericho]]
* [[Chris Sullo]]
* [[Steve Tornio]]
* [[Travis Schack]]
* [[Susam Pal]]
* [[Christian Seifert]]
 
==External links==