Bug Bounty Program Definition & Meaning
A Bug Bounty Program (BBP), also referred to as a vulnerability rewards program, is a crowdsourcing initiative offered by websites, organizations, and software developers that rewards individuals for discovering and reporting software bugs. Individuals who discover bugs can receive recognition and even compensation, especially those who report security exploits or vulnerabilities.
The purpose of a bug bounty program is to allow developers to resolve bugs before the general public is aware of them and to supplement internal code audits and penetration tests. Well-known companies such as Mozilla, Facebook, Google, and Microsoft have implemented BBPs. A bug report must document enough information in order for the program to be able to reproduce the vulnerability. The amount of compensation paid depends on the size of the organization, difficulty in hacking the system, and how much impact the bug has.
A BBP uses ethical hacking, which is the legal hacking of a computer system to identify areas where organizations can improve. Companies such as the United States Department of Defense and other government agencies have started using BBPs. This is a reversal from previously threatening ethical hackers with legal recourse to now inviting them to participate.
Bug bounty program disadvantages
While bug bounties can be effective, they can also be controversial. While most companies complete a full background check on the testers they allow into their program, the issue of trust still arises. To limit potential risk, some organizations have BBPs that require an invitation. Apple has limited bug bounty participation to a few dozen researchers.
A large disadvantage is the lack of relationship BBP testers have with a company. They do not partner with a company over time, so results are not tailored to match the company's security initiatives or level of risk.
Stay up to date on the latest developments in Internet terminology with a free newsletter from Webopedia. Join to subscribe now.
From A3 to ZZZ we list 1,559 text message and online chat abbreviations to help you translate and understand today's texting lingo. Includes Top... Read More »Huge List of Computer Certifications
Have you heard about a computer certification program but can't figure out if it's right for you? Use this handy list to help you decide. Read More »
Computer architecture provides an introduction to system design basics for most computer science students. Read More »Network Fundamentals Study Guide
Networking fundamentals teaches the building blocks of modern network design. Learn different types of networks, concepts, architecture and... Read More »The Five Generations of Computers
Learn about each of the five generations of computers and major technology developments that have led to the computing devices that we use... Read More »