|
Groups argue over merits of flaw bounties |
|
|
|
Source: TheRegister.co.uk - Posted by Benjamin D. Thomas
|
Vulnerability researchers, software makers, and security companies that buy information about software flaws found little in common during a panel discussion on Wednesday debating the merits of vulnerability-purchasing programs.
The discussion, wrapping up the first day of the CanSecWest Security Conference, left software makers and the companies that run vulnerability-purchasing programs at loggerheads over whether paying for information about flaws makes sense. Such initiatives help secure the end user, argued Michael Sutton, director of the vulnerability research labs for VeriSign subsidiary iDefense, which pioneered the first permanent bounty program for security vulnerabilities.
Read this full article at TheRegister.co.uk
Only registered users can write comments.
Please login or register. Powered by AkoComment! |
