Cyber Security Works (CSW), a firm based out of the IIT Madras Research Park, has been named a CVE Numbering Authority.
This means CSW researchers can help validate any new bug, software flaw or misconfiguration discovered in a software product or language, device or operating system, assign a CVE (Common Vulnerabilities and Exposures) ID to the bug and present it to MITRE, which will then feed into the National Vulnerability Database (NVD).
“Maintaining a universal database of this sort helps software teams, developers and security experts refer to the vulnerability at one centralised place and saves significant time and costs,” said Ram Movva, president and co-founder of CSW. CSW is the second Indian company to be recognised as a CVE Numbering Authority. India has a vibrant ethical hacking community. Today, most of these hackers go to U.S.-based sites to disclose vulnerabilities.
“We have a team of researchers and ethical hackers who have discovered 45-plus zero days (new bugs and vulnerabilities) in popular products,” Mr. Movva said.
“The process of discovering a vulnerability involves consistent follow-up with the vendor of the product. We wait for 90-plus days for the vendor to fix the vulnerability or give them time to release a patch or an advisory for the said vulnerability, after which we go public with the discovery of the new bug,” he added.
You have reached your limit for free articles this month.
Subscription Benefits Include
Today's Paper
Find mobile-friendly version of articles from the day's newspaper in one easy-to-read list.
Unlimited Access
Enjoy reading as many articles as you wish without any limitations.
Personalised recommendations
A select list of articles that match your interests and tastes.
Faster pages
Move smoothly between articles as our pages load instantly.
Dashboard
A one-stop-shop for seeing the latest updates, and managing your preferences.
Briefing
We brief you on the latest and most important developments, three times a day.
Support Quality Journalism.
*Our Digital Subscription plans do not currently include the e-paper, crossword and print.
A letter from the Editor
Dear subscriber,
Thank you!
Your support for our journalism is invaluable. It’s a support for truth and fairness in journalism. It has helped us keep apace with events and happenings.
The Hindu has always stood for journalism that is in the public interest. At this difficult time, it becomes even more important that we have access to information that has a bearing on our health and well-being, our lives, and livelihoods. As a subscriber, you are not only a beneficiary of our work but also its enabler.
We also reiterate here the promise that our team of reporters, copy editors, fact-checkers, designers, and photographers will deliver quality journalism that stays away from vested interest and political propaganda.
Suresh Nambath
Please Email the Editor