“SNAKE-OIL SECURITY CLAIMS” THE SYSTEMATIC MISREPRESENTATION OF PRODUCT SECURITY IN THE E-COMMERCE ARENA

Michigan Telecommunications and Technology Law Review n.9

by J. Michener et al.

The authors provide an overview of important issues concerning security-relevant functionality, including critical functionality for security product merchantability. The authors also review certain critical issues concerning vendor development and management processes that are necessary for a vendor to have any understanding of the security properties of his product. Unless a vendor takes appropriate actions concerning these and related issues, the vendor has little, if any, basis for claiming secure products. Thus, there is a high likelihood that representations concerning security and the basic merchantability of security-dependent functionality are misleading, at best…