Jonathan Spring
Jonathan Spring is an SEI alumni employee.
Jonathan Spring is a senior member of the technical staff with the CERT division of the Software Engineering Institute (SEI) at Carnegie Mellon University. Spring began working at the SEI in 2009. Prior posts include adjunct professor at the University of Pittsburgh’s School of Information Sciences and research fellow for the ICANN’s Security and Stability Advisory Committee (SSAC). At the SEI, Spring’s work focuses on producing reliable evidence for various levels of cybersecurity policies. Spring’s approach to work balances leading by example with reflecting on study design and other philosophical issues. Spring earned a doctoral degree in computer science from University College London.
Coordinated Vulnerability Disclosure User Stories
• White Paper
By Brad Runyon , Eric Hatleback , Allen D. Householder , Art Manion , Vijay S. Sarvepalli , Timur D. Snoke , Jonathan Spring , Laurie Tyzenhaus , Charles G. Yarbrough
Probably Don’t Rely on EPSS Yet
• Blog Post
Coordinated Vulnerability Disclosure User Stories
• White Paper
By Brad Runyon , Eric Hatleback , Allen D. Householder , Art Manion , Vijay S. Sarvepalli , Timur D. Snoke , Jonathan Spring , Laurie Tyzenhaus , Charles G. Yarbrough
Prioritizing Vulnerability Response: A Stakeholder-Specific Vulnerability Categorization (Version 2.0)
• White Paper
By Jonathan Spring , Allen D. Householder , Eric Hatleback , Art Manion , Madison Oliver , Vijay S. Sarvepalli , Laurie Tyzenhaus , Charles G. Yarbrough