English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Global: Zendy Plus annual

Presents the access of premium content as premium feature

Premium Content

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Global: Zendy Tools annual

Global: Zendy Free Plan

Global: Zendy Tools monthly

Global: Zendy Plus monthly

The security of the Internet of Things (IoT) has attracted much attention dueto the growing number of IoT-oriented security incidents. IoT hardware andsoftware security vulnerabilities are exploited affecting many companies andpersons. Since the causes of vulnerabilities go beyond pure technical measures,there is a pressing demand nowadays to demystify IoT "security complex" anddevelop practical guidelines for both companies, consumers, and regulators. Inthis paper, we present an initial study targeting an unexplored sphere in IoTby illuminating the potential of crowdsource ethical hacking approaches forenhancing IoT vulnerability management. We focus on Bug Bounty Programs (BBP)and Responsible Disclosure (RD), which stimulate hackers to reportvulnerability in exchange for monetary rewards. We carried out a qualitativeinvestigation supported by literature survey and expert interviews to explorehow BBP and RD can facilitate the practice of identifying, classifying,prioritizing, remediating, and mitigating IoT vulnerabilities in an effectiveand cost-efficient manner. Besides deriving tangible guidelines for IoTstakeholders, our study also sheds light on a systematic integration path tocombine BBP and RD with existing security practices (e.g., penetration test) tofurther boost overall IoT security.

Ethical Hacking for IoT Security: A First Look into Bug Bounty Programs and Responsible Disclosure