Live briefing
Everything about Bug bounty program
Rewards offered for reporting software bugs
A bug bounty program is a deal offered by many websites, organizations, and software developers by which individuals can receive recognition and compensation for reporting bugs, especially those pertaining to security vulnerabilities. If no financial reward is offered, it is called a vulnerability disclosure program. Wikipedia →
🧭 Start here: a 6-step reading path
- Read the overview: Bug bounty programA 5-minute orientation
- Skim a recent paper: Analysis of White and Black Hat Hacker Roles, Practices and Techniques, Considering Ethical and Legal Issues, Including Bug Bounty ProgramsInfluential work since 2022
- Pick up a classic book: Corporate CybersecurityThe most-reprinted book on the subject
- Read the landmark paper: Given enough eyeballs, all bugs are shallow? Revisiting Eric Raymond with bug bounty programsCited 83 times
- Go sideways: Zero-day vulnerabilityA closely related topic
- Go sideways: Vulnerability (computer security)A closely related topic
📖 Definitions
No dictionary entry for this exact phrase.
🏆 Landmark papers (most cited)
Given enough eyeballs, all bugs are shallow? Revisiting Eric Raymond with bug bounty programs
Bug Bounty Programs for Cybersecurity: Practices, Issues, and Recommendations
A Survey of Bug Bounty Programs in Strengthening Cybersecurity and Privacy in the Blockchain Industry
Bountychain: Toward Decentralizing a Bug Bounty Program with Blockchain and IPFS
Navigating vulnerability markets and bug bounty programs: A public policy perspective
Balancing Secrecy and Transparency in Bug Bounty Programs
Getting Started with Vulnerability Disclosure and Bug Bounty Programs
Optimal Launch Timing of Bug Bounty Programs for Software Products under Different Licensing Models
🆕 Influential since 2022
Analysis of White and Black Hat Hacker Roles, Practices and Techniques, Considering Ethical and Legal Issues, Including Bug Bounty Programs
Optimizing Bug Bounty Programs for Efficient Malware-Related Vulnerability Discovery
Bug Bounty Programs: A Comprehensive Meta-Analytical Review of Strategies, Challenges, and Future Directions
The Effectiveness of Bug Bounty Program for Technology Company Ecosystem
Incentivizing Crowds and Intergroup Spillovers: Evidence from the Internet Bug Bounty Program
📚 Books worth reading
- 📕Corporate CybersecurityJackson, John (Cybersecurity professional) · 2021
Bug Bounty Hunting EssentialsCarlos A. Lozano, Shahmeer Amir · 2018
Ranked by number of editions on Open Library, a rough measure of how lasting a book is.
🔗 Related topics
- Zero-day vulnerability A zero-day (also known as a 0-day) is a vulnerability or security hole in a computer system unknown to its developers or anyone capable of mitigating it…
- Vulnerability (computer security) In computer security, a vulnerability is a flaw or weakness in a system's design, implementation, or management that can be exploited by a malicious actor…
- Market for zero-day exploits The market for zero-day exploits is commercial activity related to the trafficking of software exploits. Software vulnerabilities and "exploits" are used…
- Zero Day Initiative Zero Day Initiative (ZDI) is an international software vulnerability initiative that was started in 2005 by TippingPoint, a division of 3Com. The program…
- Vulnerability disclosure In information security, vulnerability disclosure is a process where independent researchers discover flaws in software that can be abused to cause unintended…
- HackerOne HackerOne Inc. is a cybersecurity operations technology company managed by certified information system security professionals who conduct vulnerability…
- Sam Curry Sam Curry (born October 17, 1999) is an American ethical hacker, bug bounty hunter, and founder. He is best known for his contributions to web application…
- ImmuniWeb ImmuniWeb is a global application security company headquartered in Geneva, Switzerland. ImmuniWeb develops machine learning and AI technologies for SaaS-based…