Economics of software vulnerability disclosure
Ashish Arora, Rahul Telang · IEEE Security & Privacy · 2005
Information security breaches frequently exploit software flaws or vulnerabilities, causing significant economic losses. Considerable debate exists about how to disclose such vulnerabilities. A coherent theoretical framework helps identify the key data elements needed to develop a sensible way of handling vulnerability disclosure