【摘要】 软件漏洞与信息安全息息相关。本文阐述了21世纪以来软件漏洞产业现状、技术进展和相关经济学研究成果。并将软件漏洞产业划分成3个环节:上游的漏洞发现,中游的安全信息提供机构(SIP),以及下游的各种行业应用。本文认为软件漏洞的根源来自于技术和经济两方面。本文建议:中国应从SIP的枢纽作用、关键工具和基础设施的研制等方面发展软件漏洞产业。更多还原

【Abstract】 Software vulnerability closely relates to information security.This paper discusses the industry,technology and relative economic research since 2000 in detail.Software vulnerabilities are rooted in both technical and economic challenges.The software vulnerability industry can be divided into vulnerability discovering in upstream,security information provider(SIP) in midstream,and various applications in downstream.Both economic and technical approaches must be used to resolve software vulnerability problems.This paper suggests that China should develop the industry in SIP,tools,infrastructures,etc.更多还原