Software Vulnerability Markets¶
Al-Garni, A. M., & Malaiya, Y. K. (2014). Software Vulnerability Markets: Discoverers and Buyers. International Journal of Computer, Information Science and Engineering, 8(3), 71-81.
Cited by¶
1 citation across 1 artifact.
Each citation links to the sentence it supports in the citing article.
Primes¶
- Incentive
- In the bug bounty the target behaviour is responsible disclosure of security vulnerabilities; the decider is a security researcher weighing effort against payoff; the consequence is a cash reward; the Channel is money, the schedule a threshold (severity tiers), the magnitude set above the researcher's outside option (including, ideally, the black-market price).
This sourceAnalyzes regulated, gray, and black vulnerability markets and shows black/gray markets pay far higher prices for zero-day exploits — establishing that an effective bug-bounty reward must exceed the researcher's outside option, including the black-market price.
- In the bug bounty the target behaviour is responsible disclosure of security vulnerabilities; the decider is a security researcher weighing effort against payoff; the consequence is a cash reward; the Channel is money, the schedule a threshold (severity tiers), the magnitude set above the researcher's outside option (including, ideally, the black-market price).
Verification¶
Does it exist? Confirmed. This work's DOI resolves to a registered record, which fixes its identity. That is all it fixes.
Does it back the claim? Not recorded. The single citation of this work carries no recorded support check.
Support is checked per citation rather than per work — the same source can be cited soundly in one article and wrongly in another. Per-citation recording began recently, so a citation with no recorded check is a gap in the record rather than evidence it went unchecked.
See how references were verified.
Registry ID ref:631ad0c122a7 · see in the full table