English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Global: Zendy Plus annual

Presents the access of premium content as premium feature

Premium Content

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Global: Zendy Plus monthly

Global: Zendy Tools annual

Global: Zendy Tools monthly

Global: Zendy Free Plan

Bug bounties have become increasingly popular in recent years. This paperdiscusses bug bounties by framing these theoretically against so-calledplatform economy. Empirically the interest is on the disclosure of webvulnerabilities through the Open Bug Bounty (OBB) platform between 2015 andlate 2017. According to the empirical results based on a dataset coveringnearly 160 thousand web vulnerabilities, (i) OBB has been successful as acommunity-based platform for the dissemination of web vulnerabilities. Theplatform has also attracted many productive hackers, (ii) but there exists alarge productivity gap, which likely relates to (iii) a knowledge gap and theuse of automated tools for web vulnerability discovery. While the platform (iv)has been exceptionally fast to evaluate new vulnerability submissions, (v) thepatching times of the web vulnerabilities disseminated have been long. Withthese empirical results and the accompanying theoretical discussion, the papercontributes to the small but rapidly growing amount of research on bugbounties. In addition, the paper makes a practical contribution by discussingthe business models behind bug bounties from the viewpoints of platforms,ecosystems, and vulnerability markets.

A Bug Bounty Perspective on the Disclosure of Web Vulnerabilities