NIST’s ‘bugs’ framework cites AI to identify vulnerabilities

The National Institute of Standards and Technology has released a framework on making information in cybersecurity vulnerability disclosure more precise, as the first step in launching a series of publications aimed at promoting an increased understanding of security failures across the vulnerability management ecosystem, Inside Cybersecurity reported July 31.

NIST says the framework “enables the development of new algorithms for code analysis and the use of AI models and formal methods to identify bugs and detect, analyze, prioritize, and...