3 ms·
Perhaps a “UL Labs” type of solution for software, so that if your software and organization are certified according to the current standard, then your liabilit
by bradknowles 8y ago
Perhaps a “UL Labs” type of solution for software, so that if your software and organization are certified according to the current standard, then your liabilities would be reduced?
And yes, organizations and versions of software would have to be recertified on a regular basis.
You would want software versions to be able to be certified quickly and through an automated process, but there is already some best practice in this space — it’s just unevenly distributed.
- jsoc815 8y agoAsk and you shall receive, something... Past event: https://www.aei.org/events/securing-the-internet-of-things-a-conversation-with-sen-ed-markey-d-ma-and-rep-ted-lieu-d-ca/ https://www.aei.org/events/securing-the-internet-of-things-a... Partial event video: https://www.youtube.com/watch?v=DrnFcLuqzd4 https://www.youtube.com/watch?v=DrnFcLuqzd4
- v_lisivka 8y agoIf certification authority said that software is secure and then security flaws are found, then who is liable? IMHO, we should have optimistic check: any public network device must have guarantee from the vendor to fix any remote vulnerability in 30 days after discovery by independent security organization(s), otherwise vendor liable for the damage done by his device.