Jonathan M. Spring
where else to find them
what they talk about
all 4 in the filters
where they keep going back
no series more than once — all 4 in the filters
on a stage with
- Allen D. Householderonce
- Chris Hallenbeckonce
- David Warrenonce
all 8 in the filters
who talks about the same things
- Art Manion19 talks
- Jay Jacobs20 talks
- Christopher R Robinson24 talks
- Lisa Olson6 talks
- Justin Murphy10 talks
- Alec Summers9 talks
| title | conference | date |
|---|---|---|
| Three Musketeers: CVE, CSAF, and VEX | CVE/FIRST VulnCon 2026 & Annual CNA Summit | 2026-04-13 |
CISA and partner teams build a custom platform that ingests vendor reports, uses Vulnogram and SecVizigram prototypes for validation, and outputs paired CVE… | ||
| AI Systems Are Software Systems | CVE/FIRST VulnCon 2026 & Annual CNA Summit | 2026-04-13 |
Argues AI systems are ordinary software with familiar vulnerability management: use SBOM and track models as libraries, adopt the NIST SSDF AI profile, and… | ||
| Prioritizing Vulnerability Response with a Stakeholder Specific Vulnerability Categorization | 34th Annual FIRST Conference 2022 | 2022-06-26 |
SSVC v2 defines role-specific decision trees (supplier, deployer, coordinator) that map coarse answers to concrete actions, with an example Rockwell RCE… | ||
| Historical Analysis of Exploit Availability Timelines | 13th USENIX Workshop on Cyber Security Experimentation and Test (CSET '20) | 2020-08-10 |
Analysis of 75,807 CVE‑IDs across seven years finds 4.1% within 365 days end up with public exploit code linked in Metasploit/ExploitDB GitHub repos, totaling… | ||
| Abuse of CPE Devices and Recommended Fixes | Black Hat USA 2014 | 2014-08-02 |
Carnegie Mellon measurement finds roughly 21 million open DNS resolvers, nearly half sitting on DSL home links, and many misconfigured inside cheap home… | ||
| nothing matches | ||