The vulnerability-markets tag has no wiki summary.
11
votes
2answers
141 views
What are the likely effects of increased government spending on “Cyber Weapons” on the software industry?
From the conference scene and news this year it seems probable that there's an increased amount of spending from governmental agencies on what it getting termed "Cyber Weapons". A key component of ...
10
votes
2answers
245 views
Progress in market approaches to software vulnerability disclosure?
In A Comparison of Market Approaches to Software Vulnerability Disclosure (2006), Rainer Böhme describes the profound role of economic "market failure" in the industry dynamics that hinder software ...
9
votes
2answers
107 views
Encouraging security researchers to disclose vulnerabilities
What are approaches to forming solid relationships with security researchers?
For example, is publishing a public PGP key on the "contact us" page of a company's website for high levels of risk ...
6
votes
3answers
198 views
How and where can I best announce an XSS vulnerability in a relatively well-known website?
I'd like advice on how and where to announce an XSS vulnerability (persistent XSS to be exact). My greatest fear is the announcement getting snowed under, thus rendering the disclosure ineffective in ...
6
votes
2answers
245 views
Ethics and economy in security research
How can we design a market for information disclosure where individual security researchers may benefit economically in an ethical way?
Assume a market where the participants are governments, ...
4
votes
3answers
294 views
Vulnerable java applications
I am looking for some open source/free vulnerable JAVA based applications. It can be web application, desktop application or any other. I need them to do some experiments in my research work. They ...
