论文信息 - Economics of software vulnerability disclosure

Economics of software vulnerability disclosure

Information security breaches frequently exploit software flaws or vulnerabilities, causing significant economic losses. Considerable debate exists about how to disclose such vulnerabilities. A coherent theoretical framework helps identify the key data elements needed to develop a sensible way of handling vulnerability disclosure

Rahul Telang | Ashish Arora | A. Arora | Rahul Telang

[1] Eric Rescorla. Security Holes . . . Who Cares? , 2003, USENIX Security Symposium.

[2] N. Kiefer. Economic Duration Data and Hazard Functions , 1988 .

[3] William A. Arbaugh,et al. IEEE 52 Computer , 1985 .

[4] Steve W. Manzuik,et al. Windows of Vulnerability , 2006 .

[5] Karthik N. Kannan,et al. An Economic Analysis of Market for Software Vulnerabilities , 2004 .

[6] Penelope Leach. Who Cares , 1979 .

[7] Michael D. Smith,et al. How Much Security Is Enough to Stop a Thief?: The Economics of Outsider Theft via Computer Systems and Networks , 2003, Financial Cryptography.

[8] Ethan M. Preston,et al. Computer Security Publications: Information Economics, Shifting Liability and the First Amendment , 2002 .

[9] Eric Rescorla,et al. Is finding security holes a good idea? , 2005, IEEE Security & Privacy.

[10] Lawrence A. Gordon,et al. Sharing Information on Computer Systems Security: An Economic Analysis , 2003 .