Disclosure of Security Vulnerabilities: Legal and Ethical Issues

Much debate has been given to whether computer security is improved through full disclosure of security vulnerabilities versus keep the problems private and unspoken. Although there is still tension between those who feel strongly about the subject, a middle ground of responsible disclosure seems to have emerged. Unfortunately, just as we've moved into an era with more responsible disclosure, it would seem that there is a growing market for security vulnerabilities and zero day exploits. This book considers both ethical and legal issues involved with the disclosure of vulnerabilities and looks at the ways in which law might respond to these challenges.