From the conference scene and news this year it seems probable that there's an increased amount of spending from governmental agencies on what it getting termed "Cyber Weapons". A key component of these weapons are 0-day vulnerabilities which can be used to get access to systems which may not otherwise present an exploitable flaw.
This in turn has created a trade and market value (which can apparently be quite high) in 0-day sales to governments, with a number of companies springing up to facilitate sales.
Whilst I've seen quite a bit of conversation on the effects of this on security in general, I've not seen too much on the effects on the software development industry, and I'd be interested to here where people think this trend will have an impact.
So far thoughts that had occurred to me
- There's now an incentive for developers to either deliberately introduce flaws into software (or to fail to patch them) so that they can sell knowledge of this flaw on to 3rd parties.
- Software companies may come under pressure not to patch issues which are being actively used by the military in "Cyber Space" operations.
- Software vendors may find it harder to sell to governments other than their home nation as the assumption becomes that they will put back doors or leave exploitable flaws unpatched at the behest of government agencies.