Fred B. Schneider
Cornell University
Who Should Be Responsible for Software Security? A Comparative Analysis of Liability Policies in Network Environments
Management Science
What is the cost of better security? Who pays for it, and how can we incentivize it in the industry?