Governments should push vendors to eliminate software security flaws, cybersecurity researchers say.

• Author: Magnuson, Stew
• Position: SECURITYBEAT

* Security incidents in cyberspace can be prevented if governments push the creators of operating systems to test their software more thoroughly before releasing their products, two of the United Kingdom's leading authorities on computer security said.

Patches sent out by vendors after the release of an operating system have become the norm, but they suggest that the software has not been properly vetted, said Peter Sommer and Ian Brown in a report, "Reducing System Cybersecurity Risk," produced by the Organization for Economic Cooperation and Development, a 34-member intra-governmental organization headquartered in Paris.

[ILLUSTRATION OMITTED]

"Large numbers of attack methods are based on faults discovered in leading operating systems and applications," the authors said.

Governments should use their procurement power, standards setting and licensing to "influence industry suppliers to provide properly tested hardware and software," they said.

The report is part of a series looking at "future global shocks." Sommer and Brown downplayed the possibility of a large-scale cyberwar having a widespread impact on the...