Prevention is better than cure

Computer security is of ever increasing importance, and Distributed Infrastructures for Research are no exception. Many strategies and activities are needed to prevent and address security incidents. It is of course better to prevent security incidents than have to deal with them. One important part of incident prevention is to ensure that the software deployed on the infrastructure is as secure as possible, as free from software vulnerabilities as possible, and when vulnerabilities are found they are fixed in a timely manner. The purpose of the EGI software vulnerability group is "To minimize the risk to the EGI infrastructure arising from software vulnerabilities" and this talk will briefly summarize the issue handling procedure. In addition, we invite others from other infrastructures to collaborate and see if we can work together to learn from one another, share information, so all can minimize the risk associated with vulnerabilities more efficiently and effectively. SVG wiki is at https://wiki.egi.eu/wiki/SVG