Need help with my Computer Science question – I’m studying for my class.
1. Vulnerability Disclosure: What are the legal and ethical issues governing the disclosure of a vulnerability by an independent technical person (e.g., cyber researcher). What are the legal obligation of the government if they come to know about a vulnerability? Can they corner the vulnerability market and exploit a vulnerability against an adversary.
2. Attack Disclosure: What are the legal obligations (as well as protection for sharing) of companies about attacks on their systems and possible future attacks and vulnerabilities? Who should they disclose to: government, users of their systems who were affected by the breach and investors?
Include references and in-text citations