To print a PDF version of this article, click here.
Every year, the Department of Defense (DoD) upgrades its information technology systems, allows new applications to connect to DoD information networks, and reconfigures the enterprise to gain efficiencies. While these actions better support the warfighter and satisfy national security interests, they introduce new system vulnerabilities waiting to be exploited. Often, these vulnerabilities are discovered only after the system has already deployed, where costs to fix are much larger. This article recommends the DoD adopt an economic strategy called the vulnerability market, or the market for zero-day exploits, to enhance system Information Assurance. Through the mutual cooperation between industry and the military in securing information, the DoD optimizes security investments, secures critical information, and provides an effective and resilient warfighting capability.