Is finding security holes a good idea (2003)

by Eric Rescorla
Venue:IEEE Security and Privacy 3(1):14-19 (Jan.2005). WEIS 2004 version available (18 pages, updated 7 Feb. 2005). See also: E. Resorla, “Security Holes ... Who Cares?”, USENIX Security