The Legislative Reference on Software Vulnerability of Foreign Critical Infrastructure

摘要

The software vulnerability is the main app roach for propagating virus, Trojan and bad information. It seriously blocks the effective circulation of IT products and breaks the normal operation of critical infrastructures. The software vulnerability has become one of the main factors threatening the critical infrastructure safety. So it is of great importance on understanding the software vulnerability and perfecting relevant legislative system to research the concepts, characteristics and foreign related laws of critical infrastructure software vulnerability. From the "Panda" in China to Iran's "shock web" and "Flame virus" events, from personal information disclosure of more than one million ordinary users and seventy-seven million users of Sony gaming platform due to the vulnerability of Sony Pictures Television servers discovered by criminals to destroy, to the Google Home attack event in Morocco caused by PAK bugs hacker group only for showing off hacking technology, the attack events on critical infrastructure using software vulnerability is continuing to increase and more diversifying. The software vulnerability not only damage personal privacy but also affects the national security and political stability. It is already imminent to regulate software vulnerability and reduce its damage on critical infrastructure by legal means.