As we look for jobs in the cybersecurity space, we start to see jobs that initially spark our interest. From a previous project in class, we saw some of the intricacies within the blue team side of cybersecurity (SOC Analyst). These are the jobs that are employed to regularly maintain the integrity of an organization\u2019s defense against threat actors. On the other side of the coin we have today\u2019s module which goes into a scholarly article explaining organizations\u2019 rise in hiring the red team side of cyber security being the Pen Tester. More specifically it describes what bug bounties are and how their research showed important trends in space. The bug bounty policies are when organizations pay ethical hackers to find vulnerabilities in their systems so that they can shore up their defenses.<\/p>\n\n\n\n
Through the findings in the article, it reveals that over time the organizations who participated in these bug bounties received less reports of vulnerabilities over time which can be attributed to the easier vulnerabilities being dealt with faster. They also found that these bounties systems are very cost effective versus the alternative which would be investing in complex security systems. Smaller companies received just as lucrative results as larger companies which act as a benefit to smaller companies by reducing their threat surface withing their margins to be more economically viable. Most importantly in a social science lens, the Pen testers illuminated the fact that their main incentives to participate in this bounty system did not revolt solely on monetary gain. Other reasons for their services include receiving job experience, notoriety and even furthering knowledge in their communities. With these findings in mind the article concludes by saying that more research on the topic needs to be documented for better understanding and that the cost effectiveness of these bounty policies will lead to a rise in their usage overtime. <\/p>\n\n\n\n
References<\/u><\/strong><\/p>\n\n\n\n Sridhar K., Ng M. (2021, March 12) Hacking for good: Leveraging HackerOne data to develop an economic model of Bug Bounties, Journal of Cybersecurity<\/em>, Volume 7, Issue 1, tyab007, https:\/\/doi.org\/10.1093\/cybsec\/tyab007<\/a><\/p>\n","protected":false},"excerpt":{"rendered":" As we look for jobs in the cybersecurity space, we start to see jobs that initially spark our interest. From a previous project in class, we saw some of the intricacies within the blue team side of cybersecurity (SOC Analyst). These are the jobs that are employed to regularly maintain the integrity of an organization\u2019s… <\/p>\n