Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 499
Alerts This Week
Warning Icon 1 499

Exploring Flaw Bounties: A Panel Discussion at CanSecWest

Calendar Apr 06, 2006 • User Avatar Anthony Pell
1 min read
General Esm H446
Topics%20covered

Topics Covered

security conference software security flaw bounty vulnerability program vulnerability research
Vulnerability researchers, software makers, and security companies that buy information about software flaws found little in common during a panel discussion on Wednesday debating the merits of vulnerability-purchasing programs.

The discussion, wrapping up the first day of the CanSecWest Security Conference, left software makers and the companies that run vulnerability-purchasing programs at loggerheads over whether paying for information about flaws makes sense. Such initiatives help secure the end user, argued Michael Sutton, director of the vulnerability research labs for VeriSign subsidiary iDefense, which pioneered the first permanent bounty program for security vulnerabilities.

The link for this article located at TheRegister.co.uk is no longer available.