Justin Murphy
where else to find them
no profile links on file
what they talk about
all 4 in the filters
where they keep going back
- CVE/FIRST VulnCon & Annual CNA Summit2 editions2024–2025
all 5 in the filters
on a stage with
all 7 in the filters
who talks about the same things
- Lisa Olson6 talks
- Christopher R Robinson24 talks
- Madison Oliver8 talks
- Art Manion19 talks
- Allan Friedman20 talks
- Steve Springett9 talks
| title | conference | date |
|---|---|---|
| Establishing a Global Community of Practice on Coordinated Vulnerability Disclosure (CVD) | CVE/FIRST VulnCon 2025 | 2025-04-07 |
A global Community of Practice on Coordinated Vulnerability Disclosure is established (Dec) to harmonize guidance for third‑party CVD coordinators, meeting… | ||
| What's New in CSAF and OpenEoX | CVE/FIRST VulnCon 2025 | 2025-04-07 |
CSAF moves toward a 2.1 community draft that adds CSAF 2.1 schema changes: publisher object with multiple categories, plural CWE entries, discovery/disclosure… | ||
| Planning for Retirement: How Can We Prepare for Software’s... | SupplyChainSecurityCon @ Open Source Summit Europe 2024 | 2024-09-16 |
Proposes a concrete definition of support as a reasonable expectation of a predictable, effective response to a new security risk, maps EOL/EOS metadata into… | ||
| Planning for Retirement: How Can We Prepare for Software’s... | Open Source Summit Europe 2024 | 2024-09-16 |
Argues that the real step is shared definitions (proposes support = predictable effective response to a new security risk), then machine-readable transparency… | ||
| Panel Discussion: Don’t be Vexed by VEX - VEXperts Panel | CVE/FIRST VulnCon 2024 & Annual CNA Summit | 2024-03-25 |
Panel summarizes where VEX is actually used, what tools exist, and what still breaks: lightweight openVEX JSON‑LD statements and CAF/CSAF profiles are… | ||
| Key Steps the US Government Is Taking to Improve Citizens Everyday... | OpenGovCon @ Open Source Summit North America 2023 | 2023-05-10 |
US government agencies roll out concrete steps: publishing s-bom tooling and working groups, releasing VEX minimum requirements and running a VEX working… | ||
| What’s in a Name? Vulnerabilities, SBOMs, and the Challenge of Software Identity | SupplyChainSecurityCon at Open Source Summit Europe 2022 | 2022-09-13 |
CISA requires machine-readable SBOM data for federal procurement (BOD 22-01 / EO 14028) and treats SBOMs as a transparency layer but says they often produce… | ||
| nothing matches | ||