Jens Grossklags

Distinguished Paper Award

Bug Hunters’ Perspectives on the Challenges and Benefits of the Bug Bounty Ecosystem

Although researchers have characterized the bug-bounty ecosystem from the point of view of platforms and programs, minimal effort has been made to understand the perspectives of …

Omer Akgul
•

The Benefits of Vulnerability Discovery and Bug Bounty Programs: Case Studies of Chromium and Firefox

Recently, bug-bounty programs have gained popularity and become a significant part of the security culture of many organizations. Bug-bounty programs enable organizations to …

avatar
Soodeh Atefi
•

An Empirical Study of Android Security Bulletins in Different Vendors

Mobile devices encroach on almost every part of our lives, including work and leisure, and contain a wealth of personal and sensitive information. It is, therefore, imperative that …

Sadegh Farhang
•

On the Assessment of Systematic Risk in Networked Systems

In a networked system, the risk of security compromises depends not only on each node’s security, but also on the topological structure formed by the connected individuals, …

avatar
Aron Laszka
•

Cyber-Insurance as a Signaling Game: Self-Reporting and External Security Audits

An insurer has to know the risks faced by a potential client to accurately determine an insurance premium offer. However, while the potential client might have a good understanding …

avatar
Aron Laszka
•

Economic Analyses of Security Investments on Cryptocurrency Exchanges

Cryptocurrency exchanges are frequently targeted and compromised by cyber-attacks, which may lead to significant losses for the depositors and closure of the affected exchanges. …

Benjamin Johnson
•

The Rules of Engagement for Bug Bounty Programs

White hat hackers, also called ethical hackers, who find and report vulnerabilities to bug bounty programs have become a significant part of today’s security ecosystem. While the …

avatar
Aron Laszka
•

An Economic Study of the Effect of Android Platform Fragmentation on Security Updates

Vendors in the Android ecosystem typically customize their devices by modifying Android Open Source Project (AOSP) code, adding in-house developed proprietary software, and …

Sadegh Farhang
•

On the Economics of Ransomware

avatar
Aron Laszka
•

Devising Effective Policies for Bug-Bounty Platforms and Security Vulnerability Discovery

Bug-bounty programs have the potential to harvest the effort and diverse knowledge of thousands of independent security researchers, but running them at scale is challenging due to …

Mingyi Zhao
•