PP057: Behind the Scenes At Cisco: PSIRT, AI, CVEs, and VEX
Cisco employs a comprehensive approach, leveraging internal and external sources, including AI, to identify and address security vulnerabilities across its extensive product portfolio.
MAIN POINTS
- Cisco uses both internal and external sources to identify security bugs.
- AI plays an increasing role in detecting vulnerabilities.
- Omar Santos provides insights into Cisco's bug identification process.
- The company manages a diverse range of home-grown and acquired products.
TAKEAWAYS
- Cisco's approach to security involves a blend of traditional and innovative methods.
- AI's role in cybersecurity is expanding within Cisco's operations.
- Understanding Cisco's security processes offers valuable insights into managing complex product portfolios.
- Effective vulnerability management is crucial for maintaining product security.