Security News > 2016 > August > More on the Vulnerabilities Equities Process (Schneier on Security)

More on the Vulnerabilities Equities Process (Schneier on Security)
2016-08-04 12:25

The Open Technology Institute of the New America Foundation has released a policy paper on the vulnerabilities equities process: "Bugs in the System: A Primer on the Software Vulnerability Ecosystem and its Policy Implications." Their policy recommendations: Minimize participation in the vulnerability black market. Establish strong, clear procedures for disclosure when it discovers and acquires vulnerability. Establish rules for government...


News URL

https://www.schneier.com/blog/archives/2016/08/more_on_the_vul.html