An Interest In:
Web News this Week
- April 19, 2024
- April 18, 2024
- April 17, 2024
- April 16, 2024
- April 15, 2024
- April 14, 2024
- April 13, 2024
Some of Our Sources
- Joshua Blankenship
- TutsPlus - Design
- Vandelay Design
- You The Designer
- FanExtra - PSD
- Noupe
- Stylized Web
- Freelance Switch
- Web Resource Source
- Codrops
Help Webnuz
Referal links:
January 21, 2019 05:30 am
Original Link: http://rss.slashdot.org/~r/Slashdot/slashdot/~3/QNfk8o_ziko/bug-bounties-arent-silver-bullet-for-better-security
Bug Bounties Aren't Silver Bullet for Better Security
Many organizations may find they're better off hiring pen testers and in-house security researchers directly than running bug bounty programs, according to new MIT research. From a report: The New Solutions for Cybersecurity paper features a surprising analysis of bug bounty programs in the chapter, Fixing a Hole: The Labor Market for Bugs. It studied 61 HackerOne bounty programs over 23 months -- including those run for Twitter, Coinbase, Square and other big names -- and one Facebook program over 45 months. It claimed that, contrary to industry hype, organizations running these programs don't benefit from a large pool of white hats probing their products. Instead, an elite few produce the biggest volume and highest quality of bug reports across multiple products, earning the biggest slice of available rewards. It's also claimed that even these elite "top 1%" ethical hackers can't make a decent wage by Western standards.Read more of this story at Slashdot.
Original Link: http://rss.slashdot.org/~r/Slashdot/slashdot/~3/QNfk8o_ziko/bug-bounties-arent-silver-bullet-for-better-security
Share this article:
Tweet
View Full Article
Slashdot
Slashdot was originally created in September of 1997 by Rob "CmdrTaco" Malda. Today it is owned by Geeknet, Inc..More About this Source Visit Slashdot