nach oben

Erschienen in:

2013 | OriginalPaper | Buchkapitel

1. Introduction

verfasst von : Alana Maurushat

Erschienen in: Disclosure of Security Vulnerabilities

Verlag: Springer London

Einloggen

Aktivieren Sie unsere intelligente Suche, um passende Fachinhalte oder Patente zu finden.

search-config

KI-gestützte Suche

Aus

Abstract

Much debate has been given to whether computer security is improved through full disclosure of security vulnerabilities versus keep the problems private and unspoken. Although there is still tension between those who feel strongly about the subject, a middle ground of responsible disclosure seems to have emerged. Unfortunately, just as we’ve moved into an era with more responsible disclosure, it would seem that there is a growing market for security vulnerabilities and zero day exploits. This book considers both ethical and legal issues involved with the disclosure of vulnerabilities and looks at the ways in which law might respond to these challenges.

Sie haben noch keine Lizenz? Dann Informieren Sie sich jetzt über unsere Produkte:

Springer Professional "Wirtschaft+Technik"

Online-Abonnement

Mit Springer Professional "Wirtschaft+Technik" erhalten Sie Zugriff auf:

über 102.000 Bücher
über 537 Zeitschriften

aus folgenden Fachgebieten:

Automobil + Motoren
Bauwesen + Immobilien
Business IT + Informatik
Elektrotechnik + Elektronik
Energie + Nachhaltigkeit
Finance + Banking
Management + Führung
Marketing + Vertrieb
Maschinenbau + Werkstoffe
Versicherung + Risiko

Jetzt Wissensvorsprung sichern!

Jetzt informieren

Springer Professional "Technik"

Online-Abonnement

Mit Springer Professional "Technik" erhalten Sie Zugriff auf:

über 67.000 Bücher
über 390 Zeitschriften

aus folgenden Fachgebieten:

Automobil + Motoren
Bauwesen + Immobilien
Business IT + Informatik
Elektrotechnik + Elektronik
Energie + Nachhaltigkeit
Maschinenbau + Werkstoffe

Jetzt Wissensvorsprung sichern!

Jetzt informieren

Springer Professional "Wirtschaft"

Online-Abonnement

Mit Springer Professional "Wirtschaft" erhalten Sie Zugriff auf:

über 67.000 Bücher
über 340 Zeitschriften

aus folgenden Fachgebieten:

Bauwesen + Immobilien
Business IT + Informatik
Finance + Banking
Management + Führung
Marketing + Vertrieb
Versicherung + Risiko

Jetzt Wissensvorsprung sichern!

Jetzt informieren

Nächstes Kapitel Types of Disclosure

[1]. There are two competing models which dominate Internet analysis. The first is the Open Systems Interconnection Basic Reference Model (OSI Model) which is comprised of seven layers: physical, data link, network, transport, session, presentation and application. See http://www.en.wikipedia.org/wiki/OSI_model. The other model is the TCP/IP Model which has five layers: application, transport, network, data link and physical. See http://www.en.wikipedia.org/wiki/TCP/IP_model.

Libicki refers to this as the ‘syntactic layer’ which is comprised of instruction and interaction between information systems. This is also known as the ‘application layer’. Refer to Note 1, p. 8.

See generally [2].

Scholars such as Jennifer Chandler and Meiring de Villiers have written on tort liability for insecure software. See [3, 4]. See also an economic model for software liability in [5].

Rouse M “Exploit” at http://searchsecurity.techtarget.com/definition/exploit;

Rouse M “Zero Day Exploit” at http://searchsecurity.techtarget.com/definition/zero-day-exploit.

Reproduced in Peticolas F “La cryptography militaire.” An English version is also available on Peticolas’ website at http://petitcolas.net/fabien/kerckhoffs/.

See Stallman R “What is Free Software” found on http://www.gnu.org/philosophy/free-sw.html.

[6].

Raymond E The Cathedral and the Bazaar: Musings on Linux and Open Source by an Accidental Revolutionary (Sebastapol: O’Reily & Associates, R’vd Ed., 2001).

Raymond, above.

RFC 1392 Internet Users Glossary.

[7].

See hacking competitions run by vendors as http://blog.chromium.org/2012/08/announcing-pwnium-2.html.

See for example the Google bounty program available at http://www.google.com/about/appsecurity/reward-program.

[8].

Libicki M (2007) National security and information warfare. Cambridge University Press, Cambridge

Rice D (2008) Geekonomics: the real cost of insecure software. Addison-Wesley, Reading

Chandler J (2006) Liability for Botnet attacks. Can J Law Technol

Chandler J (2003–2004) Security in cyberspace: combating distributed denial of service attacks. Univ Ottawa Law Technol J 231

de Villiers M (2009) Information security standards. University of New South Wales Law Research Paper Working Paper 34

Tuomi I (2001) Internet, innovation, and open source: actors in the network. Available on http://www.firstmonday.dk/issues/issue6_1/tuomi

Poulsen K (2011) Kingpin: the true story of Max Butler, the master Hacker who ran a billion dollar cyber crime network. Hachette, Australia, p 42

Arora A, Nandkumar A, Telang R (2006) Does information security attack frequency increase with vulnerability disclosure? An empirical analysis Spring Science & Business Media. DOI 10.1007/s10796-006-9012-5

Titel: Introduction
verfasst von: Alana Maurushat
Verlag: Springer London
Buch: Disclosure of Security Vulnerabilities
Print ISBN: 978-1-4471-5003-9

Electronic ISBN: 978-1-4471-5004-6

Copyright-Jahr: 2013
DOI: https://doi.org/10.1007/978-1-4471-5004-6_1

Springer Professional

Abstract

Bitte loggen Sie sich ein, um Zugang zu Ihrer Lizenz zu erhalten.

Sie haben noch keine Lizenz? Dann Informieren Sie sich jetzt über unsere Produkte:

Springer Professional "Wirtschaft+Technik"

Springer Professional "Technik"

Springer Professional "Wirtschaft"