Trust, but Verify

摘要

Do you believe the software packages you buy and install are secure? Today that belief is largely a matter of faith. Could a third-party verification process, whether similar to Underwriters Laboratories or the US Food and Drug Administration, give us greater assurance of secure software?