Could a vulnerability tax work?
The new Apple security chief believes a vulnerability tax could really help make software safer. Could it work?
James Lyne, Sophos security expert, said the introduction of a tax could help "raise the bar" so software developers would be compelled to improve security in their products.
However, any tax project would need to be dealt with carefully to avoid damaging new product development," Lyne told IT PRO.
"Such an initiative had to be managed carefully however, many brilliant technology platforms generating business value start of life as underdeveloped, under resourced applications," the young security expert said.
"Stifling innovation has to be considered too."
Lyne agreed with Rice that there was no such thing as "perfect software."
So, whilst the initiative could not eliminate the issue, it could at least improve the situation.
"This tax is actually more in the category of regulation, trying to make sure companies make appropriate investment to manage the risk (presumably commensurate with resources)," Lyne added.
Get the ITPro. daily newsletter
Receive our latest news, industry updates, featured resources and more. Sign up today to receive our FREE report on AI cyber crime & security - newly updated for 2024.
"Regulation can be effective but needs to be handled carefully to avoid adverse effects."
He said it was nevertheless positive that Apple was "standing up and wanting to build transparency and drive investment."
Outside of companies, secure development practices should be instilled in education as well, Lyne said. He claimed many academic bodies were not doing enough to cover this topic.
It seems a vulnerability tax is an interesting concept one that could really shake things up. Yet the idea clearly needs some more thought if it is to ever be implemented.
Tom Brewster is currently an associate editor at Forbes and an award-winning journalist who covers cyber security, surveillance, and privacy. Starting his career at ITPro as a staff writer and working up to a senior staff writer role, Tom has been covering the tech industry for more than ten years and is considered one of the leading journalists in his specialism.
He is a proud alum of the University of Sheffield where he secured an undergraduate degree in English Literature before undertaking a certification from General Assembly in web development.
The Open Cloud Coalition wants to promote a more competitive European cloud market – but is there more to the group than meets the eye?
"Our goal is to transform partner success": Cisco just announced a major overhaul of its partner program – here’s what you need to know
Dropbox layoffs continue as firm cuts another 20% of staff