PANEL TOPIC FRIEND OR FOE? NAMED FLAWS, THE IMPACT TO YOUR PRODUCTS AND YOUR CUSTOMERS
No ratings
Presented at First 2017 by
Dr. Lisa Bradley is currently the Technical Program Manager for NVIDIA’s Product Security Incident Response Team (PSIRT). Her responsibilities include the management and resolution of product security vulnerabilities involving all NVIDIA products. She previously worked at IBM for 17 years and most recently as the PSIRT Program Manager and Team Lead. Lisa has been an active spokesperson for many tech related events, including: IBM InterConnect, 2016 FIRST Technical Colloquium in Raleigh, and the Security Journey White Belt modules. Lisa received her BA degree in both Mathematics and Computer Science from SUNY Geneseo. She then went on to receive her Masters and PhD in Applied Mathematics from NC State University. Outside of her main career, for the past 12 years, she has been a part-time professor at local universities. Lisa enjoys spending time with her husband, Jimmy, and three kids, James (9), Jesse (6) and Anna (4). Art Manion is the Technical Manager of the Vulnerability Analysis team in the CERT Coordination Center (CERT/CC), part of the Software Engineering Institute at Carnegie Mellon University. He has studied vulnerabilities and coordinated responsible disclosure efforts since joining CERT in 2001. After gaining mild notoriety for saying "Don't use Internet Explorer" in a conference presentation, Manion now focuses on policy, advocacy, and rational tinkering approaches to software security, including standards development in ISO/IEC JTC 1 SC 27 Security techniques. Prior to joining CERT Manion was the Director of Network Infrastructure at Juniata College. Amy Rose has been the Technical Project Manager for the Lenovo Product Security Incident Response team for two years, driving closure of security issues from a wide range of sources across all Lenovo products. Amy has a background in computer networking and customer support engineering for Lenovo desktops and servers. She has 6 patents granted and over 40 more patents pending with the US Patent Office covering a breadth of technologies, from servers to mobile devices, software and security. Beverly Finch is the Program Manager and Coordinator for the Lenovo PSIRT. Beverly built the Lenovo PSIRT from the ground up within a few months, obtaining buy in from all business executives and securing incident response support across all brands. With more than 20 years in the PC industry, Beverly has experience in many roles including Critical Situation Management, Software Development, Accessibility Compliance and Lean Six Sigma. A certified Project Management Professional, PMP®, Beverly brings value to Lenovo's PSIRT by applying project management and Lean Six Sigma methodologies to improve processes and communications across all teams. Beverly Finch (Lenovo, US) Panelists: Lisa Bradley (NVIDIA, US), Amy Rose (Lenovo, US), Art Manion (CERT Coordination Center (CERT/CC), US) Heartbleed, ShellShock and Ghost. Do these named vulnerabilities make you want to hurl or are you thankful for them? This session will have a panel of PSIRT experts ready to discuss how these named vulnerabilities impacted their company, products, customers and their lives. We will also discuss the important things learned from dealing with named vulnerabilities and how to be prepared for the next one.