Título: The Case for Regulating Quality within Computer Security Applications
Autores: Moore, Roksana; The University of Southampton
Fecha: 2013-10-15
Publicador: European Journal of Law Technology
Fuente:
Tipo: info:eu-repo/semantics/article
info:eu-repo/semantics/publishedVersion

Tema: No aplica
Descripción: Computer security applications (CSAs) are essential for ensuring information security across insecure mediums such as the Internet, however despite the reliance placed upon them empirical evidence and case studies indicate that they suffer similar quality concerns to the broader software industry. This paper identifies two key reasons for this. The first is that private law and compensation are unable in their current form to raise quality within CSAs. The second is that the public good characteristics of CSAs, and the negative network externalities that defective CSAs exhibit, are addressable through regulation only. There are two types of defect, those that are known to the CSA vendor and those that are not. This paper therefore proposes a two stage-approach towards addressing these. The first stage is to raise the benchmark of CSA quality by mandating the use of standardised software engineering methodologies through use of the European standardisation framework. Thereby ensuring that CSAs are released to the market without known defects. The second stage is to mandate the disclosure of exploitable defects identified post software release by leveraging the proposed European Network and Information Security Directive.
Idioma: Inglés

Artículos similares:

JURIMETRICS PLEASE! por de Mulder, Richard; Erasmus University, Rotterdam
Poem title list III –A little database outro por Virtanen, Perttu; Helsinki Institute for Information Technology HIIT
Developing an e-reader and e-publishing model for flexible and open learning on a distance learning LLB programme por McKellar, Patricia; University of London,Warburton, Steven; University of Surrey
Regulating Nanoparticles: the Problem of Uncertainty por Strand, Roger; University of Bergen,Kjølberg, Kamilla Lein; University of Bergen
FROM LEGAL THESAURUS TO E-SIGNATURES por Galindo, Fernando; University of Zaragoza
Network Neutrality and Privacy According to Art. 8 ECHR por Koops, Bert-Jaap; Tilburg Institute for Law, Technology, and Society, Tilburg University Law School,Sluijs, Jasper Paul; Tilburg Law and Economics Center, Tilburg University Law School
10