Cybersecurity Research: Addressing Barriers and Disincentives

对网络安全漏洞的关键研究可能会受到法律考虑的影响。例如，网络安全研究人员担心，某些真诚的工作可能会将他们置于个人法律危险之中。与此同时，必须解决与安全研究相关的公众和经济风险。该项目召集了一批领先的计算机科学家、学者和律师来制定挑战并提出一套具体的解决方案，包括阐明进行网络安全研究的合理规范、标准或最佳实践，这些规范、标准或最佳实践可用作定义善意研究和适用当前法规和豁免的指南。

Critical research into cybersecurity vulnerabilities may be affected by legal considerations. For example, cybersecurity researchers fear certain good-faith work could put them in personal legal jeopardy. At the same time, the risks to the public and the economy associated with security research must be addressed. This project convenes a set of leading computer scientists, academics, and lawyers to map out the challenges and propose a set of concrete solutions, including articulating reasonable norms, standards, or best practices for the conduct of cybersecurity research that could be used as a guide for defining good-faith research and for applying current statutes and exemptions.