Full Disclosure mailing list archives

Re: Project Chroma: A color code for the state ofcyber security


From: "James Matthews" <nytrokiss () gmail com>
Date: Mon, 1 Dec 2008 23:30:23 +0200

The color system was made in order to give people a quick look at the terror
scale. So to this can be something for us to have a quick look at the
exploit scale. Remember these colors are for people in the IT industry and
not for the average person.
James

On Mon, Dec 1, 2008 at 10:52 PM, n3td3v <xploitable () gmail com> wrote:

Maybe he thinks the same as you and is making fun of the Department of
Homeland Security, SANS Internet Storm Center etc.

On Mon, Dec 1, 2008 at 4:27 PM, rholgstad <rholgstad () gmail com> wrote:
and how does making a color based on these inputs protect people?

Mike C wrote:
On Mon, Dec 1, 2008 at 4:21 AM, vulcanius <vulcanius () gmail com> wrote:

By the way, I also noticed that the new site for your project has the
current threat level as yellow. Is it safe to assume that you've
already got
your metric systems in place and running?



Yes,

We do have a working framework for color code generation. The inputs
to this function include

*exploits released in the past week
  - The severity of the exploit
  - The application it was in
  - The language
  - estimated users of the software

*The previous week's color

*Localized nature of exploits.

We cannot comment more on this until it is refined and standardized.
If you are (or know) an antivirus vendor, please contact me offline to
move ahead.



_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/




-- 
http://www.astorandblack.com/

http://www.jewelerslounge.com/movado-watches-on-sale
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Current thread: