Complex Cybersecurity Vulnerabilities: Lessons Learned from Spectre and Meltdown

The hearing will review cybersecurity issues raised in response to the Spectre and Meltdown vulnerabilities, such as challenges with conducting complex coordinated vulnerability disclosure and supply chain cybersecurity, and how best to coordinate cybersecurity efforts going forward. This hearing follows a letter sent by Sens. John Thune (R-S.D.) and Bill Nelson (D-Fla.) to 12 organizations about the Spectre and Meltdown vulnerabilities and the steps taken to mitigate these vulnerabilities. 

Witnesses

• Ms. Donna Dodson, Chief Cybersecurity Advisor and Director of the National Cybersecurity Center of Excellence, National Institute of Standards and Technology, U.S. Department of Commerce
• Dr. José-Marie Griffiths, President, Dakota State University
• Ms. Joyce Kim, Chief Marketing Officer, ARM
• Mr. Art Manion, Senior Vulnerability Analyst, Computer Emergency Readiness Team Coordination Center, Software Engineering Institute, Carnegie Mellon University
• Mr. Sri Sridharan, Managing Director, Florida Center for Cybersecurity, University of South Florida