SoK:"Interoperability vs Security"Arguments: A Technical Framework

2025-02-06

AI Summary

This paper addresses antitrust concerns arising from Big Tech’s invocation of “security” to resist interoperability mandates. It distinguishes genuine security risks and technical constraints from anti-competitive abuses masquerading as security justifications. Methodologically, the study develops the first regulatory-practice-oriented taxonomy of “security–interoperability” disputes, integrating legal-technical analysis, empirical comparison of landmark U.S. and EU cases, and security engineering evaluation. It identifies three prototypical patterns by which dominant firms strategically misuse security arguments to impede interoperability. Theoretically, it uncovers the deep coupling among market power, economic incentives, and technical security logic—revealing how security claims function as instruments of exclusion. The work delivers a reusable, cross-domain analytical toolkit and a decision-support framework, offering regulators, engineers, and policymakers a rigorous yet operationally viable paradigm for assessing interoperability-related security claims. (149 words)

Technology Category

• Application Domains: Security
• Philosophy and Ethics of AI: Privacy & Security
• Natural Language Processing: Safety and Robustness

Application Category

• Security and Privacy: Large-scale security measurements
• Responsible Web: Social and technical mechanisms of refusal for web technologies and applications
• Economics, Online Markets and Human Computation: The sharing economy

Abstract

Concerns about big tech's monopoly power have featured prominently in recent media and policy discourse, and regulators across the US, the EU, and beyond have ramped up efforts to promote healthier competition in the market. One of the favored approaches is to require certain kinds of interoperation between platforms, to mitigate the current concentration of power in the biggest companies. Unsurprisingly, interoperability initiatives have generally been met with vocal resistance by big tech companies. Perhaps more surprisingly, a significant part of that pushback has been in the name of security -- that is, arguing against interoperation on the basis that it will undermine security. We conduct a detailed examination of"security vs. interoperability"arguments in the context of recent antitrust proceedings in the US and the EU. First, we propose a taxonomy of such arguments. Second, we provide several detailed case studies, which illustrate our taxonomy's utility in disentangling where security and interoperability are and are not in tension, where securing interoperable systems presents novel engineering challenges, and where"security arguments"against interoperability are really more about anti-competitive behavior than security. Third, we undertake a comparative analysis that highlights key considerations around the interplay of economic incentives, market power, and security across diverse contexts where security and interoperability may appear to be in tension. We believe systematically distinguishing cases and patterns within our taxonomy and analytical framework can be a valuable analytical tool for experts and non-experts alike in today's fast-paced regulatory landscape.

Problem

• Examines 'security vs. interoperability' in antitrust contexts.
• Proposes taxonomy to analyze security and interoperability tensions.
• Highlights economic incentives and market power in interoperability debates.

Innovation

• Taxonomy of security arguments
• Case studies on interoperability challenges
• Comparative analysis of economic incentives