About liability…
¨ With exception of Germany, no major
countries have serious IT liability laws
¨ This appears to be changing as a result of:
Medical and financial data privacy concerns
Critical Infrastructure Protection concerns
¨ Right now, users cannot hold developers or
evaluators legally accountable for insecure
products
600.436 High-
Assurance Systems
Fall 01/Introduction
10