Balancing Secrecy and Transparency in Bug Bounty Programs.
Bug bounty programs (BBPs) allow ethical hackers to identify software vulnerabilities, helping vendors fix flaws before they’re exploited—but vendors often control disclosure, creating a lack of transparency. This secrecy can delay patches, obscure software quality, and leave users uninformed about...
| Publicado en: | Communications of the ACM Vol. 68; no. 8; pp. 20 - 24 |
|---|---|
| Autores principales: | , |
| Formato: | Artículo |
| Publicado: |
Association for Computing Machinery
Aug2025
|
| Materias: | |
| Acceso en línea: | Ver este registro en EBSCOhost |
| fields | @attributes: recordID: 1 pdfLink: plink: https://search.ebscohost.com/login.aspx?direct=true&db=hlh&AN=186913167&site=ehost-live header: @attributes: shortDbName: hlh uiTerm: 186913167 longDbName: Humanities International Complete uiTag: AN controlInfo: bkinfo: jinfo: jid: 00010782 ACM jtl: Communications of the ACM issn: 00010782 maglogo: N pubinfo: dt: Aug2025 vid: 68 iid: 8 pid: 68 pub: Association for Computing Machinery artinfo: ui: 186913167 10.1145/3724077 ppf: 20 ppct: 4 formats: tig: atl: Balancing Secrecy and Transparency in Bug Bounty Programs. aug: au: Telang, Rahul Hydari, Muhammad Zia affil: Carnegie Mellon University, Pittsburgh, Pennsylvania, United States University of Pittsburgh, Pittsburgh, Pennsylvania, United States su: Computer hackers Computer security vulnerabilities Internet security Computer security laws Organizational transparency Computer ethics sug: subj: Computer hackers Computer security vulnerabilities Internet security Computer security laws Organizational transparency Computer ethics ab: Bug bounty programs (BBPs) allow ethical hackers to identify software vulnerabilities, helping vendors fix flaws before they’re exploited—but vendors often control disclosure, creating a lack of transparency. This secrecy can delay patches, obscure software quality, and leave users uninformed about security risks. While BBPs offer clear benefits, such as reducing uncoordinated disclosures and incentivizing ethical behavior, they also reinforce market asymmetries. The article argues for mandatory disclosure standards and stronger government oversight to balance transparency with vendor incentives, ultimately strengthening cybersecurity and user trust. pubtype: Periodical doctype: Article src: R language: English refInfo: copyright: @attributes: flag: Y dt: @attributes: year: 2025 holdings: @attributes: islocal: N |
|---|