“A later module addresses cybersecurity policy through a social science framework. At this point, attention can be drawn to one type of policy, known as bug bounty policies. These policies pay individuals for identifying vulnerabilities in a company’s cyber infrastructure.  To identify the vulnerabilities, ethical hackers are invited to try exploring the cyber infrastructure using their penetration testing skills.  The policies relate to economics in that they are based on cost/benefits principles.  Read this article https://academic.oup.com/cybersecurity/article/7/1/tyab007/6168453?login=true  and write a summary reaction to the use of the policies in your journal.  Focus primarily on the literature review and the discussion of the findings.”

I found this article on Bug Bounty policies to be quite informative. The following article provided an in-depth understanding of the development of the policies that are used to find vulnerabilities within a company’s cyber infrastructure. Along with discussing how effective these policies were in preventing cyber-attacks and how it helped enhance cybersecurity. I found it fascinating to learn about how these bug bounty programs aided ethical hackers when it came to identifying and reporting vulnerabilities within the company’s IT systems in exchange for rewards. 

Within the article, it also went over the economic principles behind the policies, explaining the role of cost-benefit analysis, when it came to determining the rewards for the ethical hackers. It also contained evidence that the bug bounty policies enhance company’s cybersecurity and explained how the program has grown and become more popular for companies to use. Along with strongly recommencing companies to adopt these policies to ensure the safety of their cybers infrastructure and minimizing the risk of cyber-attacks.

Overall, I found this article fascinating and better understand how bug bounty policies allow ethical hackers to make money while also helping companies become more aware of their weaknesses within their systems.