Security Vulnerability and Incident Reporting

Paper Summary:

Both Independent Software Vendors (ISVs) and retailers with an Internet presence have struggled over how and when to release information to the public regarding security vulnerabilities and/or security breaches. This paper examines this debate and provides a potential conclusion.

From the Paper:

"In the modern age of information technology, security services and solutions are at the core of any organization's or Independent Software Vendor's (ISV) information technology strategy. Security is a baseline and absolute requirement for maintenance of an IT solution, yet it is often also one of the most difficult and dynamic components that IT managers have to contend with. In the past several years, reports of security vulnerabilities and associated attacks have reached ever increasing levels. Interestingly, most attacks occur after security vulnerability has been reported and a patch made available by an ISV."

More papers on Security Vulnerability and Incident Reporting:

• Term Paper # 144076 : "Security Management and Computer Systems"
• Term Paper # 125623 : "Data Security Management and Ethics"
• Term Paper # 9515 : "Database Security Risks and Strategies"

APA Citation:

MLA Citation: