Federal agencies tackle software security
The Department of Energy on Tuesday will show off a "model contract" it signed "that demonstrates a new way for government to purchase software with security built in, enabling and requiring vendors to take more responsibility for both delivering less vulnerable systems and keeping them that way," according to a press release from the Center for Internet Security (CIS).
CIS, a nonprofit in Hershey, Penn., that advises members on computer security, is assisting the government in its quest for intruder-proof software. The center is organizing Tuesday's meeting at the JW Marriott Hotel in Washington, D.C.
The government effort could lead to improvements in computer security for all consumers of information technology, said Alan Paller, research director at the SANS (SysAdmin, Audit, Network, Security) Institute. "The government is going to use its procurement power to change the way vendors deliver their software," he said.
[ Read more ]