New Milestone for MITRE's Information Security Dictionary

More than 1,000 Entries now recorded

FOR IMMEDIATE RELEASE

Bedford, Massachusetts, October 16, 2000 — The MITRE Corporation has announced a new milestone in the Common Vulnerabilities and Exposures (CVE) dictionary, the first lexicon that provides standardized names and descriptions for publicly known information security vulnerabilities and exposures. CVE makes it easier for the information security community to share data across separate vulnerability databases and security tools.

As of today, the CVE dictionary has recorded more than 1,000 entries that identify specific computer vulnerabilities and exposures. "This is especially significant when you consider that CVE's size has nearly tripled in the past 12 months," said MITRE Lead Information Security Engineer Steve Christey, "and that doesn't include an additional 700 candidate entries that are now being reviewed. It never would have been possible without the active participation of so many leading organizations in the information security community."

Christey also serves as moderator of the CVE Editorial Board, which consists of a worldwide consortium of 30 commercial, academic and government organizations, including Microsoft, IBM, Ernst & Young, Sun Microsystems, Cisco Systems, Internet Security Systems, Network Associates, the CERIAS Center at Purdue University, the CERT Coordination Center and the SANS Institute.

In addition to this milestone, MITRE has upgraded its CVE Web site (cve.mitre.org) with new information and functionality. According to MITRE's CVE Project Manager Margie Zuk, "the site now allows users to sign up for e-mail notification of CVE updates and other timely CVE information. We've also added reference maps, which help users to quickly get CVE names using well-known security references."

"We've seen several other exciting developments in the past few months," added Christey. "CVE candidate names are starting to appear in announcements of new information security vulnerabilities, and companies continue to approach us about including CVE in their products. In fact, more than 25 organizations are now working towards making their own tools and databases CVE-compatible. The fact that the information security community has embraced the CVE Initiative will help make the Internet and other computer networks a far more secure environment for everyone."

MITRE (www.mitre.org) is a not-for-profit company that provides engineering services to the government. Chartered to work in the public interest, it operates Federally Funded Research and Development Centers for the DOD, the FAA and the IRS.

Solutions That Make a Difference.®
Copyright © 1997-2013, The MITRE Corporation. All rights reserved.
MITRE is a registered trademark of The MITRE Corporation.
Material on this site may be copied and distributed with permission only.

Privacy Policy | Contact Us