Google Proposes An Open-Source Vulnerability Interchange Schema

[phoronix]

Phoronix: Google Proposes An Open-Source Vulnerability Interchange Schema

As part of Google's latest work on trying to enhance open-source software security, months after starting their own open-source vulnerability database they are now looking to push an open-source vulnerability interchange schema to make it easier to exchange information on vulnerabilities and making it easier for automated analysis...

https://www.phoronix.com/scan.php?page=news_item&px=Google-Vulnerability-Schema

[ddriver]

Here's a look at the design in its near-finalized state.

Wow, I've never seen so little information spread over so many bytes...

[ThoreauHD]

It's too bad they weren't this open about their Wuhan bioweapon funding.

[tildearrow]

Wow, I've never seen so little information spread over so many bytes...

Yeah. Is this reinventing the wheel? (when we already have CVE available)

[q2dg]

Yeah. Is this reinventing the wheel? (when we already have CVE available)

And STIX/TAXII (if I've not missed the point)

[cjcox]

Final Jeopardy: Collects all information about you and gives away your contact information to all.