Blog

Closing Remarks

17:30-17:45

This is an almost-complete paraphrasing of what was said. Please check the audio recording if you want a more accurate/complete account (and let me know if I have anything down that's grossly innacurate).

Jennifer Granick, Stanford Center for Internet & Society
Lauren Gelman, Stanford Center for Internet & Society
Scott Blake, Bindview
Greg Schaffer, PricewaterhouseCoopers

JG:
We have 10 minutes divided by 4, since we’re running late. Read more about Closing Remarks

The Role of Law

17:45

What role should legal rules play and how can the law help or hurt security in the area of vulnerability disclosure?

Gregory P. Schaffer, PricewaterhouseCoopers, Moderator
Peter Swire, Professor of Law at Ohio State University
Stephen Wu, Esq., InfoSec Law Group

(My apologies for my slow fingers...)

Greg Shaffer: How many people in the room are lawyers?

Snarky audience member: “Up against the wall.”

Laughter.

Greg ties this all back into his once being a lawyer… What are the differences in the realms? Read more about The Role of Law

Communication between vendors and researchers

16:37

(Jake here blogging the second to last session. Most everything is paraphrased... For a much better – and more accurate – report, try the audio archive later in the week.)

Jennifer Granick, Esq., Stanford CIS
Jim Duncan, Cisco
Hal Varian, Professor, University of California, Berkeley

What are the practical considerations in formulating, implementing, and enforcing vulnerability disclosure policies or best practices?

Hal Varian: Referencing June 1, 2000 NYT article, “Managing Online Security Risks,” talks about why crypto systems fail: Read more about Communication between vendors and researchers

Policies & Practices Encouraging Patch Installation

1438

Lauren Gelman, Stanford CIS, Moderator
Vincent Weafer, Symantec
Stephanie Fohn, Consultant

Vincent: Patching can be very expensive, and it's not always the most cost-effective way to solve the problem. Segmenting the network can help lower the urgency of patching and thus lower cost, but isn't a foolproof solution by any means. Transparency is important - simplify the patching process, and users will be more willing & able to cooperate. Read more about Policies & Practices Encouraging Patch Installation

Lunch & first afternoon session

1230-1345 Lunch

Lunch was great. Salmon (I think - I usually just eat whatever is put in front of me) with greens and potatoes. More potatoes and less salmon would've been good. Conversation was excellent. Talked to Jake W. and Heather Ford about global politics, NGOs, different dysfunctional aspects of different cultures, privacy, communism, capitalism, paranoia, etc. I was going to skip dessert, but that cake looked really good. And it was.

I'm feeling sharper this afternoon than I felt this morning. Food helped a lot.

1350 Read more about Lunch & first afternoon session

Pages

Subscribe to Stanford CIS Blog