Beyond the Bugs: Enhancing Bug Bounty Programs through Academic Partnerships

Result code in IS VaVaI
<a href="https://www.isvavai.cz/riv?ss=detail&h=RIV%2F00216224%3A14220%2F24%3A00139897" target="_blank" >RIV/00216224:14220/24:00139897 - isvavai.cz</a>
Result on the web
<a href="https://dl.acm.org/doi/10.1145/3664476.3670455" target="_blank" >https://dl.acm.org/doi/10.1145/3664476.3670455</a>
DOI - Digital Object Identifier
<a href="http://dx.doi.org/10.1145/3664476.3670455" target="_blank" >10.1145/3664476.3670455</a>

Result language
angličtina
Original language name
Beyond the Bugs: Enhancing Bug Bounty Programs through Academic Partnerships
Original language description
This paper explores the growing significance of vulnerability disclosure and bug bounty programs within the cybersecurity landscape, driven by regulatory changes in the European Union. The effectiveness of these programs relies heavily on the expertise of participants, presenting a challenge amid a shortage of skilled cybersecurity professionals, particularly in less sought-after sectors. To address this issue, the paper proposes a collaborative approach between academia and bug bounty issuers. By integrating bug bounty programs into cybersecurity courses, students gain practical skills and soft skills essential for bug hunting and cybersecurity work. The collaboration benefits both issuers, who gain manageable manpower, and students, who receive valuable hands-on experience. A pilot conducted during the current academic year yielded positive results, indicating the potential of this approach to address the demand for skilled cybersecurity professionals. The insights gained from the pilot inform future considerations and advancements in this collaborative model.
Czech name
—
Czech description
—

Project
<a href="/en/project/VJ03030052" target="_blank" >VJ03030052: Capacity building in cybersecurity</a><br>
Continuities
P - Projekt vyzkumu a vyvoje financovany z verejnych zdroju (s odkazem do CEP)

Publication year
2024
Confidentiality
S - Úplné a pravdivé údaje o projektu nepodléhají ochraně podle zvláštních právních předpisů

Article name in the collection
ARES '24: Proceedings of the 19th International Conference on Availability, Reliability and Security
ISBN
9798400717185
ISSN
—
e-ISSN
—
Number of pages
8
Pages from-to
1-8
Publisher name
Association for Computing Machinery
Place of publication
New York
Event location
Vídeň
Event date
Jan 1, 2024
Type of event by nationality
WRD - Celosvětová akce
UT code for WoS article
001283894700099

Similar results(10)