While surfing the internet for the regular activities, suddenly found a domain named (bcsi.gov.bd), “Bangladesh cyber security intelligence” (BCSI) in elaborating form. Curious mind wants to know the fact, so deep dive the domain and found a Facebook page also.
According to the website, “Bangladesh cyber security intelligence” (BCSI) to work aiming “to proactively defend and secure Bangladesh’s cyber landscape through advanced threat intelligence, robust cyber security collaboration, and continuous research and development. We strive to empower national cyber security capabilities and ensure comprehensive national asset monitoring and cyber threat prevention.”
Bangladesh cyber security intelligence (BCSI) sites shows the main five category they will be working including National cyber security research (NCSR), national vulnerability disclosure program (NVDP), national attack surface (NAS), cyber security projects (NSP), and alert and advisories (a2).
While visiting in the page, there are some news articles of both national and international affairs of recent happening.
Having the objective of facilitate responsible disclosure, enhance cyber security posture and fostering collaboration, BCSI to run national vulnerability disclosure program (NVDP) to serves as a centralized platform for security researchers to responsibly disclose vulnerabilities they discover in the systems and applications deployed across various government entities.
By establishing a clear and transparent process for reporting vulnerabilities, the NVDP facilitates timely mitigation efforts, reducing the risk of exploitation and enhancing overall cyber security resilience.
It’s a collaborative initiative between the government and the cyber security research community to enhance the security posture of the nation’s digital infrastructure. This program aims to establish a structure framework for responsible vulnerability disclosure, enabling security researchers to report identified vulnerabilities in a safe and efficient manner, the site reads.
Anyone can submit a report through “[email protected]”, upon approval through the process of submission of vulnerabilities, assessment and mitigation and finally researchers will get acknowledgement and reward.
“Hall of Fame: National Cyber Heroes” recognizes National Vulnerability Disclosure Program (NVDP), where the remarkable individuals who embody the spirit of patriotism and dedication to national cyber security. These awesome guys committed to safeguard countries nation’s digital infrastructure, demonstrating exceptional skill, integrity protecting country’s critical assets and sensitive information. So, anyone maintaining all procedure can be a national cyber hero through NVDP program.
According to the site, BCSI’s “Bangladesh threat landscape” (monthly) report coming soon where malware infection, vulnerable service, open port, DDoS potential, exposed and open services include.
“Bangladesh cyber security intelligence”(BCSI) social handle (Facebook) page shows it’s a public and government service and have a contact mail and website address.
No other clear information is here like who the authority/body is or which ministry belongs to it.
On Sunday (04.05.2024) Bangladesh cyber security intelligence (BSCI) call on researchers for National Vulnerability Disclosure Program (NVDP) on their Facebook page.
The post reads, “National Vulnerability Disclosure Program (NVDP) is a government initiative and a project of Bangladesh Cyber Security Intelligence (BCSI) aimed at protecting and enhancing Bangladesh’s cyber security infrastructure. Our goal is to build a Smart Bangladesh enabled by secure digital infrastructure.
We believe that cyber security is a team sport, and there are various ways to collaborate with BCSI. Whether partnering with allies, industry, or researchers to strengthen cyber security awareness, we aim to advance the state of cyber security.
If you are a security researcher interested in participating in the NVDP, please review our guidelines and apply to become an NVDP researcher”. They provide a link for the registration.
The story is ongoing. Keep in touch
(Media Disclaimer: This report is based on research conducted internally and externally using different ways. The information provided is for reference only, and users are responsible for relying on it. Infosecbulletin is not liable for the accuracy or consequences of using this information by any means)