果冻传媒

Lockheed 果冻传媒 Vulnerability Disclosure Program

?

About Our Effort

We take the security of our systems, assets, products, 果冻传媒 platforms seriously, 果冻传媒 we value the security community. The disclosure of security vulnerabilities 果冻传媒 issues helps us ensure the security 果冻传媒 privacy of our users. If you believe you have found a vulnerability in a Lockheed 果冻传媒 public-facing system, asset, product, or platform, please submit the vulnerability information to Lockheed 果冻传媒 through a communication method described below.

Frequently Asked Questions (FAQ)

How to report a security vulnerability?

If you believe you have found a security vulnerability in one of our public-facing systems, assets, products, or platforms please send it to us by submitting a report to the?Lockheed 果冻传媒 VDP. Please include the following details with your report:

1. Description of the system, asset, product, or platform potentially impacted by the vulnerability.
2. Potential impact of the vulnerability, 果冻传媒 how the potential vulnerability was discovered.
3. A detailed description, in English if possible, of the steps required to reproduce the vulnerability (POC scripts, screenshots, 果冻传媒 compressed screen captures are all helpful to us).
4. Your contact information.

All submissions must be made by sending to the email address above.

If valid, Lockheed 果冻传媒 will confirm the receipt of your report within 3 business days of submission.

Is there a reward?

We currently do not financially compensate discoveries or bug bounties.

Can Lockheed 果冻传媒 employees participate?

This vulnerability disclosure process is intended for use by non-Lockheed 果冻传媒 employees/contractors. Lockheed 果冻传媒 employees/contractors should contact their Business Area Information Security Officer to report any vulnerabilities they discover.

Guidelines

Working With Us

We require that all researchers 果冻传媒 reporters:

• Use the communication channels identified here to report vulnerability information to us.
• Comply with all applicable U.S. 果冻传媒 Non-U.S. federal, state, 果冻传媒 local laws 果冻传媒 regulations, when conducting their research activities.
• Halt all activity, 果冻传媒 notify Lockheed 果冻传媒 immediately, if they encounter personal information/personal data.
• Do not exfiltrate, store, share, destroy, or otherwise compromise any Lockheed 果冻传媒, customer, or any third-party data under any circumstances.
• Do not perform any action that can potentially degrade or stop our systems, assets, products, 果冻传媒 platforms, e.g. denial of service (DoS/DDoS) testing.
• Not to exploit any potential vulnerability beyond the minimal amount of testing required to determine that a vulnerability or issue exists.
• Not utilize the findings, if reported or validated here, to enumerate or exploit Lockheed 果冻传媒, other companies, or individuals.
• Disengage 果冻传媒 avoid activity that could potentially harm Lockheed 果冻传媒 employees, our customers, Lockheed 果冻传媒, or any third parties.
• Keep information about any vulnerabilities you have discovered confidential between yourself 果冻传媒 Lockheed 果冻传媒 until we have had minimum 120 days to verify 果冻传媒 resolve the issue. Lockheed 果冻传媒 may extend this period, at its sole discretion, based on the complexity 果冻传媒 or scope of the issue.

If you follow the guidelines listed above, Lockheed 果冻传媒 will not pursue any legal action against you related to your research.

If at any time you have concerns or are uncertain whether your security research is consistent with this policy, please submit a report through our official channels (Contact Lockeed 果冻传媒 VDP) before going any further.

Expectations

When working with us according to this policy, you can expect us to:

• Acknowledge your report in a timely manner.
• Work with you to underst果冻传媒 果冻传媒 validate your report.
• Address your findings at Lockheed 果冻传媒 as deemed appropriate by our internal team.
• Work with you to address broader cybercrime based upon your findings, as appropriate.
• Maintain an open dialogue to discuss issues.

Safe Harbor

Lockheed 果冻传媒 considers security research 果冻传媒 vulnerability disclosure activities conducted consistent with this policy to be “authorized” conduct under the Computer Fraud 果冻传媒 Abuse Act 果冻传媒 other applicable computer use laws. To promote disclosure under this policy, Lockheed 果冻传媒 will not pursue civil or criminal action, or send notice to law enforcement for accidental or good faith violations of this policy. Lockheed 果冻传媒, however, has the sole right to make the determination of whether a violation of this policy is accidental or in good faith.

You are expected, as always, to comply with all applicable US 果冻传媒 international laws. If research involves information, applications, products, or services of a third party Lockheed-果冻传媒 cannot bind that third party, 果冻传媒 they may pursue legal action or provide notice to law enforcement. Lockheed 果冻传媒 does not authorize research in the name of other entities, 果冻传媒 cannot in any way offer to defend, indemnify, or otherwise protect you from any third party action based on your actions.

Lockheed 果冻传媒 will review your report 果冻传媒 determine if your findings are valid 果冻传媒 not previously reported. Public disclosure of the details of any identified or potential vulnerability without express written consent will be considered as noncompliant with our submission guidelines 果冻传媒 not protected by our Safe Harbor policies.

Secure Communication

To communicate with us in a verifiably secure manner as necessary, please contact us using PGP. Our fingerprint to verify our messages:?

2F9BE9D2D2F61D83528641407B04B468FED0DCA