Stories
Slash Boxes
Comments

SoylentNews is people

posted by Fnord666 on Tuesday March 21 2017, @05:53AM   Printer-friendly
from the keep-it-to-yourself dept.

RAND corporation recently received rare access to study a couple hundred 0-day vulnerabilities and their exploits.

It turns out that 0-day vulnerability discoveries live for about 6.9 years, and that the ones found by a pair of serious opponents (typically nation-state governments) have only a few percent overlap. This means that releasing discoveries to the public provides very little defensive value while obviously destroying offensive ability.

The report (summary and full text[PDF]) includes quite a bit more about the industry, including some estimates of pricing and headcount.


Original Submission

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 2) by bob_super on Tuesday March 21 2017, @09:42PM (2 children)

    by bob_super (1357) on Tuesday March 21 2017, @09:42PM (#482419)

    > The main threats are: China, Russia, France, Israel, Iran, India, North Korea. Besides them, things aren't too serious.

    *recovers from laughing*
    I've got a bridge to sell you if you don't think that most Middle-Eastern/Gulf countries, South-and-East-Asian countries, and most of Europe (plus the UK) should be on your cute little list.
    "Sure, we spend billions on weapons, but who cares about them cybers?"

    Seriously deluded.

    Starting Score:    1  point
    Karma-Bonus Modifier   +1  

    Total Score:   2  
  • (Score: 0) by Anonymous Coward on Wednesday March 22 2017, @12:55AM (1 child)

    by Anonymous Coward on Wednesday March 22 2017, @12:55AM (#482483)

    The UK is part of 5EYES, cooperating with us. Sure, they may cheat, but they can't afford to piss us off.

    Most of Europe is being cheap. They habitually underfund their military.

    I covered "Middle-Eastern/Gulf countries, South-and-East-Asian countries" with Hacking Team. Yep, it's pitiful. They depend on shitty stuff from Hacking Team, and even Hacking Team laughs at the incompetence.