Re: What is the state of vulnerability research?

["Steven M. Christey" <coley () mitre org>]

MindsX asked:

> Why do I think Mitre should be coming out with answers, not
> questions?

To get the best answers, you have to ask the right questions.

The questions are part of a hidden motive of mine: to serve the public
interest (one of MITRE's Corporate Values, by the way [1]).  Asking
might, in some small way, help part of the research community to do
more than slouch towards legitimacy, which IMHO is needed for more
effective security overall.

I figured there would be more responses by now, so maybe some
researchers aren't ready to think about these things, or don't care.

- Steve

[1] http://www.mitre.org/about/mission.html