Collaborate Disseminate
I am trying to understand what is the difference between these two. I know both roles are some quite similar, because as vulnerability research, and product security finds flaws in popular apps, nonpopular, but however in VR it may involv… Continue reading What’s the difference between product security and vulnerability research?
How can I be up to date and get news on recent attacks and vulnerabilities?
Is there any trusted source of information (websites, databases, …)
Is it known for software development companies to shop for 0-day vulnerabilities on black markets in order to burn them?
Microeconomics tell me “no”, as some sources claim that 0-days are short in supply, thus really expensi… Continue reading Do companies shop for 0-days on black markets to fix them?
I am cyber security student. Different sources often mention a black market where it is possible to buy illegal services, such as zero-day vulnerability, email hacking, leaked information etc. Could you recommend me a popular… Continue reading most popular black market [on hold]
From a business standpoint, how would you express the need for a vulnerability research team?
In the end, would it be infeasible from a business standpoint unless said business chalked it up as a marketing cost (to promote o… Continue reading How to justify a Vulnerability Research function at a company
From a business standpoint, how would you express the need for a vulnerability research team?
In the end, would it be infeasible from a business standpoint unless said business chalked it up as a marketing cost (to promote o… Continue reading How to justify a Vulnerability Research function at a company
A zero day vulnerability refers to a hole in software that is unknown
to the vendor.
Since, zero day vulnerabilities are unknown can any estimation of amounts be made? What are possible scenarios to estimate the amount of zero-days? For … Continue reading Is there an estimation of the number of zero-days out there?
In A Comparison of Market Approaches to Software Vulnerability Disclosure (2006), Rainer Böhme describes the profound role of economic "market failure" in the industry dynamics that hinder software security. He also describes 4… Continue reading Progress in market approaches to software vulnerability disclosure?