NIST Proposes Public-Private Group to Help with NVD Backlog

An embattled National Institute of Standards and Technology (NIST), hobbled by budget cuts, is looking for more help from both inside and outside the government. NIST is trying to manage a growing backlog of security vulnerabilities coming into the database it maintains.

The National Institute of Science and Technology, which manages the critical National Vulnerability Database (NVD), warned in February that it was falling behind in keeping up with the flow of flaws being submitted. At the time, it noted “an increase in software and, therefore, vulnerabilities, as well as a change in interagency support.”