Idioma:

The Way Forward for Security Vulnerability Disclosure Policy: Comparative Analysis of US, EU, and Netherlands

Lee, Roger

Big Data, Cloud Computing, and Data Science Engineering, 2023, Vol.1075, p.119-131 [Periódico revisado por pares]

Sem texto completo

Citações Citado por

Título:
The Way Forward for Security Vulnerability Disclosure Policy: Comparative Analysis of US, EU, and Netherlands
Autor: Lee, Roger
Assuntos: Security researcher ; Security vulnerability ; Vulnerability ; Vulnerability disclosure ; Vulnerability disclosure policy (VDP) ; White hacker
É parte de: Big Data, Cloud Computing, and Data Science Engineering, 2023, Vol.1075, p.119-131
Descrição: If someone who finds vulnerability does not disclose it, the vulnerability may never be revealed or may be exploited by other malicious users. Therefore, it is necessary to disclose vulnerabilities to enhance security. Some countries already operating vulnerability disclosure policy (VDP). As a case study, this paper analyzed the cases of the US, EU, and Netherlands to derive key elements of the VDP and propose tasks to be considered when operating and improving the VDP in the future. The main implications of this study are that: (1) It is important to protect security researchers from criminal or civil liability, (2) the VDP should be spread across the public and private sector, (3) Manage the known vulnerabilities and ensure transparency and accountability of the management entity.
Títulos relacionados: Studies in Computational Intelligence
Editor: Switzerland: Springer International Publishing AG
Idioma: Inglês

Voltar para lista de resultados