Explore the current state and future of the Bug Bounty industry in this informative conference talk featuring Casey Ellis, founder and CEO of Bugcrowd, at LevelUp 2017. Gain insights into the critical role of bug bounties in enterprise security programs, the growth of the crowd, and increased adoption of ongoing testing. Discover why bug bounties have become an essential component of mature security strategies. Participate in an engaging Ask Me Anything (AMA) session where Casey addresses audience questions on topics ranging from the societal impact of bug bounties to the challenges faced by beginners in the field. Learn about black-box vs. white-box testing preferences, the potential for public disclosure of bug reports, and the lessons learned from customer experiences. Delve into the unique perspective of an industry leader on the evolving landscape of cybersecurity and the opportunities it presents for both seasoned professionals and newcomers alike.
The State of Bug Bounties and Future Trends - Casey Ellis AMA
Overview
Syllabus
THE STATE OF BUG BOUNTIES
"BUG BOUNTIES CONTINUE TO BE A CRITICAL COMPONENT OF ENTERPRISE SECURITY PROGRAMS THE GROWTH OF THE CROWD AND INCREASED ADOPTION OF ON-GOING TESTING DEMONSTRATES HOW IMPORTANT BUG BOUNTIES HAVE BECOME AS A COMPONENT OF A MATURE SECURITY PROGRAM." - MOORE, FOUNDER OF METASPLOIT
WHY THE NAME BUGCROWD?
DO YOU FEEL THAT YOU HACK EVEN WHEN YOU DON'T HACK (DAILY ACTIONS)?
WHAT IS YOUR FAVORITE COLOUR?
DO YOU MEASURE THE SOCIETAL IMPACT OF BUG BOUNTIES IN ANY WAY? IF NOT - WHY NOT, AND HOW MIGHT YOU MEASURE THIS?
WHY ARE AUSSIES SO AWESOME IN CYBER SECURITY?
WHAT ARE YOUR THOUGHTS ON BLACK-BOX VS WHITE-BOX TESTING? WHAT DO YOU PREFER AND WHY?
HI CASEY, CAN YOU ADD THE FEATURE TO DISCLOSE AT LEAST SOME BUG REPORTS PUBLIC?
WHAT IS THE WORST EXPERIENCE BUGCROWD HAS HAD WITH A CUSTOMER? WHY? WHICH LESSONS WERE LEARNED?
WOULD YOU LOVE TO HIRE, BUG HUNTERS IN BUGCROWD INC. :
INORDER TO FIND LOW HANGING FRUITS BEGINNERS HAVE TO FIND CREATIVE BUGS WHICH COMES IN EXPERIENCE, HOW TO MEND THIS GAP AND MAKE IT EASY FOR BEGINNERS?
Taught by
Bugcrowd
Related Courses
-
Play by Play: Bug Bounties for Companies
-
The Art and Value of Bug Bounties
-
Crowdsourced Security: Insights from Industry Pioneers - Founder AMA
-
Combining the Power of Builders and Breakers in Cybersecurity - USENIX Enigma 2018
-
Welcome to the Blue Team - How Building a Better Hacker Accidentally Built a Better Defender
-
100 Bug Bounties and Security Research - Lessons from BSides Tampa 2015
