Information Systems Analysis

Please answer both questions with 300+ words or more.. See attachment from researcher. 

Thank you

I am attaching here a paper by a leading software security researcher to minimize software vulnerabilities or their exploitation by attackers Two of the three ideas proposed by these papers advocate the use of law/regulations to minimize software vulnerabilities. Dorothy Denning puts forward two ideas: (1) Use of a vulnerability bounty program that rewards vulnerability discoverers, and (2) Holding software developers legally responsible (liable) for their faulty programs. 

For this conference, your task is to take these 2 ideas and discuss its pros and cons. You may build your case from scratch or build upon some one else's post in the conference. Avoid duplications. Two quality posts are required from every one.