We Need a Building Code for Building Code

The author looks at computer security, calling for a regulatory code for software development designed to ensure it is written to avoid recognized cybersecurity vulnerabilities. He compares his proposal to the role of building codes for architects and engineers, saying that the large number of cyber...

Full description

Bibliographic Details
Published in:Communications of the ACM Vol. 58; no. 2; pp. 24 - 27
Main Author: Landwehr, Carl
Format: Opinion
Published: Association for Computing Machinery Feb2015
Subjects:
Online Access:View this record in EBSCOhost
fields @attributes:
  recordID: 1
pdfLink:
plink: https://search.ebscohost.com/login.aspx?direct=true&db=hlh&AN=100777122&site=ehost-live
header:
  @attributes:
    shortDbName: hlh
    uiTerm: 100777122
    longDbName: Humanities International Complete
    uiTag: AN
  controlInfo:
    bkinfo:
    jinfo:
      jid:
        00010782
        ACM
      jtl: Communications of the ACM
      issn: 00010782
      maglogo: N
    pubinfo:
      dt: Feb2015
      vid: 58
      iid: 2
      pid: 68
      pub: Association for Computing Machinery
    artinfo:
      ui:
        100777122
        10.1145/2700341
      ppf: 24
      ppct: 3
      formats:
      tig:
        atl: We Need a Building Code for Building Code
      aug:
        au: Landwehr, Carl
        affil:
          Lead Research Scientist, Cyber Security Policy and Research Institute (CSPRI), George Washington University, Washington, D.C.
          Visiting McDevitt Professor of Computer Science, LeMoyne College, Syracuse, N.Y.
      su:
        Computer software development
        Computer security
        Computer security vulnerabilities
        Computer software quality control
        Computer crimes
        Data security failures
        Cyberterrorism
        Construction laws
        Standards
        Government policy
      sug:
        subj:
          Computer software development
          Computer security
          Computer security vulnerabilities
          Computer software quality control
          Computer crimes
          Data security failures
          Cyberterrorism
          Construction laws
          Standards
          Government policy
      ab: The author looks at computer security, calling for a regulatory code for software development designed to ensure it is written to avoid recognized cybersecurity vulnerabilities. He compares his proposal to the role of building codes for architects and engineers, saying that the large number of cybersecurity personnel being hired today reflect problems in the underlying software and suggesting they are analogous to firefighters putting out many fires caused by poorly designed buildings. Topics include the importance of the software industry playing a lead role in developing such a code and the need to revise it over time to meet evolving cybersecurity challenges.
      pubtype: Periodical
      doctype: Opinion
      src: R
    language: English
    refInfo:
    copyright:
      @attributes:
        flag: Y
      dt:
        @attributes:
          year: 2015
    holdings:
      @attributes:
        islocal: N