Your Tax Dollar$ at Work?

[Vin DSL]

Here's a weird one for you:

http://nvd.nist.gov/nvd.cfm

Just happened to run across it while I was searching for the latest vulns in PHP-Nuke...

When did this start?

[jason]

When did this start?

Last summer, according to SANS:

The National Institute of Standards and Technology has launched the National Vulnerability Database. NVD is the new incarnation of the ICAT vulnerability database and will be updated daily. NVD "integrates all publicly available US government vulnerability resources and provides references to industry resources ... and is based on the CVE vulnerability naming standard." NVD is funded by DHS' National Cyber Security Division and is designed to complement security advisories from US-CERT which focus primarily on serious and critical flaws. (http://www.sans.org/newsletters/news...&issue=33#201)

Outside of SANS I haven't really heard much talk about it.

--Jason

[Vin DSL]

I'll tell you what...

It's got a pretty comprehensive set of links -- SecurityReason, SecurityFocus, Secunia -- basically a one stop clearinghouse. If you'll pardon the pun, time to get cracking...

This is going to be great!