Home > Journals > MTTLR > Vol. 25 > Iss. 1 (2018)
Article Title
The Secrets We Keep…: Encryption and the Struggle for Software Vulnerability Disclosure Reform
Abstract
Vulnerabilities within pieces of software can expose otherwise secure data to outside parties. Such vulnerabilities are exploited not just by malicious actors looking to exploit secured data for criminal reasons, but also by law enforcement and intelligence agencies. Government agencies have cultivated vulnerabilities as investigative tools and cyber weapons, and at times keep the vulnerabilities they have discovered secret from both the companies that produced the software and the consumers who rely upon it. While the US Government has created a vulnerability disclosure system to help decide when to keep a vulnerability secret, it does not do enough to balance the government’s national security and law enforcement interests with the data security interests of the public. As debates over government access to encrypted data continue, a strong legal framework for deciding when and how government actors can keep vulnerabilities secret must be established.
Recommended Citation
Ian Williams,
The Secrets We Keep…: Encryption and the Struggle for Software Vulnerability Disclosure Reform,
25
Mich. Telecomm. & Tech. L. Rev.
105
(2018).
Available at:
https://repository.law.umich.edu/mttlr/vol25/iss1/4
Included in
Consumer Protection Law Commons, Internet Law Commons, National Security Law Commons, Science and Technology Law Commons