*
烽火(huo)(huo)(huo)(huo)通(tong)(tong)(tong)信PSIRT全称为(wei)(wei)烽火(huo)(huo)(huo)(huo)安(an)(an)全应(ying)急(ji)响应(ying)团(tuan)队(FiberHome Product Security Incident Response Team)。烽火(huo)(huo)(huo)(huo)通(tong)(tong)(tong)信PSIRT是专职的团(tuan)队,负责烽火(huo)(huo)(huo)(huo)通(tong)(tong)(tong)信产(chan)(chan)品相(xiang)(xiang)关(guan)漏(lou)洞(dong)(dong)(dong)的接(jie)收、核查和披露。烽火(huo)(huo)(huo)(huo)通(tong)(tong)(tong)信将漏(lou)洞(dong)(dong)(dong)定义(yi)为(wei)(wei)产(chan)(chan)品中可被(bei)利(li)(li)用的安(an)(an)全问题,一旦被(bei)攻击者利(li)(li)用后可造成产(chan)(chan)品的完整性(xing)、可用性(xing)或机密性(xing)的破坏。漏(lou)洞(dong)(dong)(dong)不等(deng)同于(yu)质量缺陷,质量缺陷是满足触发条件时无需(xu)攻击者利(li)(li)用就会触发,而漏(lou)洞(dong)(dong)(dong)则必须被(bei)攻击者利(li)(li)用后触发。烽火(huo)(huo)(huo)(huo)通(tong)(tong)(tong)信鼓励安(an)(an)全研究人员、行业(ye)组织、客户和供(gong)应(ying)商将识别的与烽火(huo)(huo)(huo)(huo)通(tong)(tong)(tong)信产(chan)(chan)品相(xiang)(xiang)关(guan)的疑似漏(lou)洞(dong)(dong)(dong)报(bao)告给烽火(huo)(huo)(huo)(huo)通(tong)(tong)(tong)信PSIRT,烽火(huo)(huo)(huo)(huo)通(tong)(tong)(tong)信PSIRT将遵循ISO/IEC 30111、ISO/IEC 29147等(deng)行业(ye)标准处(chu)理烽火(huo)(huo)(huo)(huo)通(tong)(tong)(tong)信产(chan)(chan)品的疑似漏(lou)洞(dong)(dong)(dong)。