Overview

Software vulnerabilities are a pervasive issue in the digital landscape. This course will explore the non-technical factors that contribute to the prevalence of bugs in software systems. A distinctive aspect of software is its ability to address vulnerabilities through patching; however, the process of releasing and implementing patches presents significant challenges for both vendors and users. Furthermore, patching practices have evolved considerably in recent years.

The first part of the course will examine why these vulnerabilities persist, the key stakeholders within the ecosystem, and the implications for both software providers and end-users. The second part will delve into the complexities of software liability, analyzing the unique characteristics of software that complicate the application of traditional liability laws. We will try to understand where software vendors should pay for vulnerable code? The course will provide valuable insights into the current legal landscape and what might be anticipated in the future.

Sample instructor(s)

Rahul Telang

Duration

6 hours

Customizable?

Yes

In-person or remote

Hybrid

Intended audience

  • Managers who deal with software vulnerabilities, applying or releasing
  • Managers who deal with policy

Takeaways

Managerial and policy issues when dealing with software vulnerabilities

Course topics

  • Software vulnerabilities, zero day and disclosure
  • Software patching
  • Market for software vulnerabilities
  • Bug Bounty programs
  • Sad state of software liability law
  • Should software vendors pay?

Prerequisites

None

Materials

Materials will be provided

Contact us

To learn about our custom programs and any upcoming open enrollments, reach out to Michael Lisanti.