Alexander Trevino
Professor Umphlet
CYSE201S
Due: July 21, 2024
MODULE 11 JOURNAL ENTRY 2
The article on bug bounty policies examines how companies use ethical hackers to find
weaknesses in their cyber systems. By paying hackers to find problems before bad actors exploit
them, companies can save money and improve security. This approach is based on the economic
principle of cost-benefit analysis, where the benefits of finding and fixing vulnerabilities early
outweigh the costs of running the program.
Several benefits of bug bounty programs are highlighted. One advantage is accessing a
wide range of hacker skills, often finding vulnerabilities that in-house teams might miss. These
programs also encourage quick discovery and fixing of security issues due to their competitive
nature. Ethical hackers, motivated by rewards, work diligently to identify security flaws, leading
to more secure systems.
However, there are challenges. Running these programs can be costly and time-
consuming, as it takes resources to check and fix the reported problems. Companies need
dedicated teams to manage the influx of reports and verify their validity. Ethical hackers might
feel unappreciated if their work isn’t properly rewarded, potentially leading them to unethical
behavior. The large number of reports, including many low-quality ones, can overwhelm security
teams, making it hard to focus on critical issues.
In conclusion, bug bounty policies are a smart way to improve cybersecurity by using the
skills of many hackers to find and fix problems early. Although challenging to manage, the
Trevino2
benefits, like better security and cost savings, make them a valuable part of a strong
cybersecurity strategy. Companies that effectively manage bug bounty programs can enhance
their security and protect their digital assets.
Trevino3
References
Ransbotham, S., & Mitra, S. (2021). Are bug bounty programs worth it? Journal of
Cybersecurity, 7(1). Retrieved from
https:\/\/academic.oup.com\/cybersecurity\/article\/7\/1\/tyab007\/6168453?login=true.<\/p>\n","protected":false},"excerpt":{"rendered":"
Alexander TrevinoProfessor UmphletCYSE201SDue: July 21, 2024MODULE 11 JOURNAL ENTRY 2The article on bug bounty policies examines how companies use ethical hackers to findweaknesses in their cyber systems. By paying hackers to find problems before bad actors exploitthem, companies can save… Continue Reading →<\/a><\/p>\n","protected":false},"author":26774,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","wds_primary_category":0},"categories":[1],"tags":[],"_links":{"self":[{"href":"https:\/\/student.wp.odu.edu\/atrev004\/wp-json\/wp\/v2\/posts\/66"}],"collection":[{"href":"https:\/\/student.wp.odu.edu\/atrev004\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/student.wp.odu.edu\/atrev004\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/student.wp.odu.edu\/atrev004\/wp-json\/wp\/v2\/users\/26774"}],"replies":[{"embeddable":true,"href":"https:\/\/student.wp.odu.edu\/atrev004\/wp-json\/wp\/v2\/comments?post=66"}],"version-history":[{"count":1,"href":"https:\/\/student.wp.odu.edu\/atrev004\/wp-json\/wp\/v2\/posts\/66\/revisions"}],"predecessor-version":[{"id":67,"href":"https:\/\/student.wp.odu.edu\/atrev004\/wp-json\/wp\/v2\/posts\/66\/revisions\/67"}],"wp:attachment":[{"href":"https:\/\/student.wp.odu.edu\/atrev004\/wp-json\/wp\/v2\/media?parent=66"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/student.wp.odu.edu\/atrev004\/wp-json\/wp\/v2\/categories?post=66"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/student.wp.odu.edu\/atrev004\/wp-json\/wp\/v2\/tags?post=66"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}