标准编号：ISO/IEC 29147:2014
中文名称：信息技术 安全技术 信息泄露
英文名称：Information technology — Security techniques — Vulnerability disclosure
发布日期：2014-02
标准范围
This International Standard gives guidelines for the disclosure of potential vulnerabilities in products and online services. This International Standard details the methods a vendor should use to address issues related to vulnerability disclosure. This International Standarda) provides guidelines for vendors on how to receive information about potential vulnerabilities in their products or online services,b) provides guidelines for vendors on how to disseminate resolution information about vulnerabilities in their products or online services,c) provides the information items that should be produced through the implementation of a vendor’s vulnerability disclosure process, andd) provides examples of content that should be included in the information items.This International Standard is applicable to vendors who respond to external reports of vulnerabilities in their products or online services.
立即下载标准文件