The vulnerability forecasting community gathers each year to discuss how we can estimate/forecast/predict the number of vulnerabilities we will have to manage. Note that management is different things to different stakeholders. If you do coordinated disclosure you want to know how many mediations you will be doing, but if you are an attack surface monitoring company you want to know how many patches you might have to push or recommend. We're also interested in exploits and expliotation; how to count both, or how to explain the cost of developing them or repairing the harm. We're interested in data sources and formats, and how those formats shape our predictions.

We believe strongly that cyber security will become better the more we can predict about the vulnerability ecosystem.

Submission Guidelines

This is a workshop for practitioners as well as academics. Those with a job or those that want one. We ask that you submit a 45 min talk on a subject you think the community will be interested in. We do not ask you to have a full academic paper, but we respect it if you do. On the other hand if you have code and visualisations we respect that equally.

As usual we have two tracks:

• Full presentations on day one with a focus on methods and results
• Light workshops on day two with a focus on data sources or works in progress

List of Topics

• Measuring Vulnerabilites, Exploits, Exploitation and/or their features
• Predicting or Forecasting for Vulnerability management
• Decision support and science of security with respect to vulnerability management
• Data sources or data formats

Committees

Organizing Committee

• Matilda Rhode
• Éireann Leverett
• Art Manion
• Jeroen van der Ham

Programming Committee

• Matilda Rhode
• Éireann Leverett
• Art Manion
• Jeroen van der Ham
• Natalie Kilber
• Celine Pypaert
• Jay Jacobs

Venue

The conference will be held in: Cambridge, England at Darwin College. A lovely city where we can relax, enjoy talks, walks, punting, and wine. We can accommodate up to 120 guests this year, and we expect to have a rich collection of social events. The city has a lot of history to give us, in the rolling tradition of our conference, it is not the capital city but still worthy of your time and visit.

Champions of the Student

We will make arrangements for students to attend for free again, but this is now by sponsorship. So we expect between around 30 free tickets to be released by lottery, the exact number will depend on our sponsorship results. Badges of the students will be marked as sponsored by the company that did so, and we encourage the student attendees to spend a little time with our sponsors.

This helps us keep student tickets free, but also grow the conference from year to year.

Contact

All questions about submissions should be emailed to eireann(dot)leverett[at]cantab(dot)net