:

RAND Study Finds Zero-Day Software Vulnerabilities Have A Lifespan of Almost Seven Years

Wednesday, March 22nd, 2017

SHARE:

A newly released RAND Corp. study found that zero-day vulnerabilities have an average life expectancy (time between first private discovery and public disclosure) of 6.9 years, making it a reasonable option to stockpile vulnerabilities for cyber defenders and attackers.The study, “Zero Days, Thousands of Nights: The Life and Times of Zero-Day Vulnerabilities and Their Exploits,” was based on access to a dataset of over 200 zero-day software vulnerabilities. Zero-days are software vulnerabilities unknown to the vendor and can be used…

Congress

Warren And Sheehy Renew Call for “Right to Repair” In NDAA

Sen. Elizabeth Warren (D-Mass.) and Sen. Timothy Sheehy (R-Mont.), two members of the Senate Armed Services Committee (SASC), are renewing their call for “Right to Repair” language in the National […]

HASC Looks To Restrict USV Deliveries Without Navy CONOPS And Strategy

The House Armed Services Committee’s (HASC) fiscal year 2027 defense policy draft bill aims to restrict the Navy’s use of unmanned surface vessels (USV) until it decides on key factors […]

Congress

Gaps In Army’s Tactical Counter-Drone Capabilities Remain Concern Of HASC

A draft defense policy bill released this week says the Army is fielding counter-drone capabilities for defense of fixed sites and maneuver forces but suggests that troops at the lowest […]

Army

HASC Wants Closer Look At Army’s SBMC Program, Cites Avoiding Past IVAS Missteps

The House Armed Services Committee (HASC) wants a closer look at the Army’s Soldier Borne Mission Command (SBMC) effort, citing support for the development program while expressing caution to avoid […]