Fetching the paper…

Reading the bibliography…

2023

Decentralized Attack Search and the Design of Bug Bounty Schemes

Gersbach, Hans, Mamageishvili, Akaki, Pitsuwan, Fikri

Original
PDF
Post on X

Understand

Systems and blockchains often have security vulnerabilities and can be attacked by adversaries, with potentially significant negative consequences.

Therefore, infrastructure providers increasingly rely on bug bounty programs, where external individuals probe the system and report any vulnerabilities (bugs) in exchange for rewards (bounty).
We develop a simple contest model of bug bounty.
A group of individuals of arbitrary size is invited to undertake a costly search for bugs.

Decentralized Attack Search and the Design of Bug Bounty Schemes · Around

Built on

Digging for Golden Carrots: An Analysis of Research Tournaments
Taylor, C. R. (1995) · 1995
Earlier work this paper cites.
The optimal allocation of prizes in contests
Moldovanu, B. and Sela, A. (2001) · 2001
Earlier work this paper cites.
Optimal Design of Crowdsourcing Contests
Archak, N. and Sundararajan, A. (2009) · 2009
Earlier work this paper cites.
Optimal Contest Design for Simple Agents
Ghosh, A. and Kleinberg, R. (2016) · 2016
Earlier work this paper cites.
Given enough eyeballs, all bugs are shallow? Revisiting Eric Raymond with bug bounty programs
Maillart, T., Zhao, M., Grossklags, J., and Chuang, J. (2017) · 2017
Earlier work this paper cites.

Similar

Effective Prize Structure for Simple Crowdsourcing Contests with Participation Costs
Sarne, D. and Lepioshkin, M. (2017) · 2017
Cited alongside, same era.
The Rules of Engagement for Bug Bounty Programs
Laszka, A., Zhao, M., Malbari, A., and Grossklags, J. (2018) · 2018
Cited alongside, same era.
Selecting contestants for a rent-seeking contest
Mercier, J.-F. (2018) · 2018
Cited alongside, same era.
Optimal crowdsourcing contests
Chawla, S., Hartline, J. D., and Sivan, B. (2019) · 2019
Cited alongside, same era.

Then

Release of source code leads to discovery of flaw in Swiss Post’s new e-voting system
Federal Chancellery (2019) · 2019
Later among the works it cites.
Bug Bounty Programs for Cybersecurity: Practices, Issues, and Recommendations
Malladi, S. S. and Subramanian, H. C. (2020) · 2020
Later among the works it cites.
An Empirical Study of Bug Bounty Programs
Walshe, T. and Simpson, A. (2020) · 2020
Later among the works it cites.
Federal Administration procures platform for bug bounty programmes
Federal Department of Finance (2022) · 2022
Later among the works it cites.

Beyond the bibliography

alphaXiv searches the wider corpus for related work and actual follow-ups.

Open on alphaXiv

alphaXiv is searching for related work…