软件漏洞责任制度研究

发布时间：2018-04-13 20:21

本文选题：信息安全 + 标准软件　；参考：《华中科技大学》2013年博士论文

【摘要】：信息安全的核心在于软件安全,但软件存在漏洞已成为常态,直接导致了病毒和恶意程序的横行。解决软件漏洞问题,促进软件安全,成为信息时代的要务。本文首先分析了解决软件漏洞问题的制度需求。由于软件安全柠檬市场和公地悲剧现象的存在,导致市场失灵,漏洞软件充斥市场。虽然建立新的市场机制是解决市场失灵问题的途径之一,但是建立软件漏洞市场的尝试由于其固有的障碍难以取得成功。通过对软件市场运行的模型分析我们可以看出,赋予软件公司一定的法律责任,可以比较好的促进软件质量的提高,软件漏洞问题需要软件漏洞责任制度来解决。其次,阐述了对漏洞软件适用瑕疵担保责任的可能性和基本原则。软件公司应当对其软件漏洞承担瑕疵担保责任,虽然在实践中,各软件在其格式合同条款中均设定有免责或者限制责任的条款,但如果这些条款符合法定条件,可被认定为无效。如果软件存在漏洞,买受人可以向开发商请求修补,如果因为开发商的瑕疵履行使买受人受损,还可以请求损失赔偿,但该损失赔偿受到可预见原则的限制。再则,探讨了对于漏洞软件适用严格责任的必要性和可能性,论述了漏洞软件产品责任的基本问题。如果软件中存在漏洞,即存在安全缺陷,若对合法用户造成了损害,且该损害与软件漏洞又存在因果关系,则软件开发商应当承担严格责任,应当赔偿用户的财产损失,若软件漏洞导致了用户隐私的泄露,则还应当赔偿精神损失。如果软件漏洞尚未造成损害,则用户有权要求开发商对其进行修补。最后,阐述了完善软件漏洞合同责任和构建软件漏洞产品责任的建议,并提出了完善软件漏洞公益诉讼制度的相关建议,建议给予消费者协会提起公益诉讼的原告主体资格。
[Abstract]:The core of information security lies in software security, but the existence of vulnerabilities in software has become the norm, which directly leads to the spread of viruses and malicious programs.To solve the problem of software vulnerability and to promote software security has become an important task in the information age.This paper first analyzes the system requirements to solve the software vulnerability problem.Due to the existence of the lemon market and the tragedy of the common land, the market is out of order and the vulnerability software is flooding the market.Although the establishment of a new market mechanism is one of the ways to solve the problem of market failure, the attempt to establish a software vulnerability market is difficult to succeed because of its inherent obstacles.Through the analysis of the model of software market operation we can see that giving certain legal responsibility to software companies can better promote the improvement of software quality. Software vulnerabilities need to be solved by software vulnerability liability system.Secondly, it expounds the possibility and basic principle of applying defect guarantee liability to vulnerability software.Software companies should assume liability for defects in their software vulnerabilities. Although in practice, each software has a clause of exemption or limitation in the terms of its format contract, if these terms meet the statutory requirements,May be deemed invalid.If there is a flaw in the software, the buyer can ask the developer for repair, and if the buyer is injured because of the developer's defective performance, he can also claim compensation for the loss, but the compensation for the loss is limited by the principle of predictability.Furthermore, the necessity and possibility of applying strict liability to vulnerability software are discussed, and the basic problems of vulnerability software product liability are discussed.If there is a vulnerability in the software, that is, there is a security defect, and if the damage is caused to the legitimate user and there is a causal relationship between the damage and the software vulnerability, the software developer shall bear strict liability and shall compensate the user for the loss of property.If the software vulnerability leads to the disclosure of user privacy, it should also compensate for moral losses.If the software vulnerability has not been damaged, the user has the right to ask the developer to fix it.Finally, the paper expounds the suggestions of perfecting the liability of software vulnerability contract and constructing the liability of software vulnerability product, and puts forward some relevant suggestions to perfect the system of software vulnerability public interest litigation, and proposes to give the plaintiff subject qualification of consumer association to file public interest lawsuit.
【学位授予单位】：华中科技大学
【学位级别】：博士
【学位授予年份】：2013
【分类号】：TP309;F49

【参考文献】