Ban the bug?

Abstract: 

Recent cyberweapons leaks from the US National Security Agency have led to discussions about new policy concerning the disclosure of computer network vulnerabilities. The actions of a group called the Shadow Brokers have stolen and released cyberweapons from the NSA, leading to global physical consequences. By exploiting a vulnerability in Microsoft code, the WannaCry ransomware attack was able to shut down UK hospitals and computer systems around the world. The significant damage caused by stolen cyberweapons has led to the development of new rules guiding the US on informing software manufacturers of vulnerabilities. While the disclosure of potential exploits would create more secure infrastructure, organizations such as the NSA would limit their own capabilities regarding surveillance and intelligence. Furthermore, these guidelines are unable to be enforced well as a result of the confidentiality required for cyberweapons to be effective. While treaties exist to regulate nuclear weapon stockpiles and are enforced by inspectors, accountability cannot be easily tracked when attempting to regulate information regarding potential cyber exploits.

Author: 

Douglas Heaven

Year: 

2017

Domain: 

Dimension: 

Region: 

Data Type: