The Legitimate vulnerability market: the secretive world of 0-day exploit sales

No abstract is available for this paper.

• Publication year

  2007

• Venue

  Workshop on the Economics of Information Security

• Publication date

  Unknown publication date

• Fields of study

  Business, Computer Science

• Identifiers

  No identifiers available.

• External record

  Open on Semantic Scholar

• Source metadata

  Semantic Scholar

• No claims are published for this paper.

• No concepts are published for this paper.

• Is finding security holes a good idea?

  2005cited by this paper
• The Likelihood of Vulnerability Rediscovery and the Social Utility of Vulnerability Hunting

  2005cited by this paper
• Vulnerability Markets What is the economic value of a zero-day exploit ?

  2005cited by this paper
• Bug Auctions: Vulnerability Markets Reconsidered

  2004cited by this paper

• Study Club, Labor Union or Start-Up? Characterizing Teams and Collaboration in the Bug Bounty Ecosystem

  2025cites this paper
• Your Botnet Is His Botnet? A Deep Dive Into the Supply Chain Attack Against Cyber-Arm Industry

  2025cites this paper
• An Attack Exploiting Cyber-Arm Industry

  2025cites this paper
• PWN Lessons Made Easy with Docker: Toward an Undergraduate Vulnerability Research Cybersecurity Class

  2024cites this paper
• Navigating the Cyber Threat Landscape: A Comprehensive Analysis of Attacks and Security in the Digital Age

  2024cites this paper
• Towards a Greater Understanding of Coordinated Vulnerability Disclosure Policy Documents

  2023cites this paper
• Under false flag: using technical artifacts for cyber attack attribution

  2020cites this paper
• A system dynamics, epidemiological approach for high-level cyber-resilience to zero-day vulnerabilities

  2020cites this paper
• A Bargaining Games Approach to Information Security Interactions

  2019cites this paper
• A zero-sum game: the zero-day market in 2018

  2018cites this paper
• Harnessing Uncertainty in Vulnerability Market

  2018cites this paper
• Stockpiling Zero-day Exploits: The Next International Weapons Taboo

  2018cites this paper
• Organisationsübergreifender Austausch sicherheitsrelevanter Informationen als Grundlage für Cyber-Lagebilder

  2018cites this paper
• Discerning Novel Value Chains in Financial Malware

  2017cites this paper
• The U.S. Vulnerabilities Equities Process: An Economic Perspective

  2017cites this paper
• Exploring vulnerability-induced attack frequencies through agent-based modelling

  2016cites this paper
• Quantitative economics of security : software vulnerabilities and data breaches

  2016cites this paper
• Do bugs foreshadow vulnerabilities? An in-depth study of the chromium project

  2016cites this paper
• A problem shared is a problem halved: A survey on the dimensions of collective cyber defense through security information sharing

  2016cites this paper
• The Impact of Ethical Regulation and Developer Reputation Scoring on Information Security Professionalism Practice

  2016cites this paper
• Cyberinsurance and Public Policy : Self-Protection and Insurance with Endogenous Adversaries

  2015cites this paper
• Preventing Attacks in Real-Time through the Use of a Dummy Server

  2015cites this paper
• Establishing national cyber situational awareness through incident information clustering

  2015cites this paper
• A Bayesian network model for likelihood estimations of acquirement of critical software vulnerabilities and exploits

  2015cites this paper
• The Impact of the Dark Web on Internet Governance and Cyber Security

  2015cites this paper
• Risk-Based Vulnerability Disclosure: Towards Optimal Policy

  2015cites this paper
• Shifts in the Cybersecurity Paradigm: Zero-Day Exploits, Discourse, and Emerging Institutions

  2014cites this paper
• Cyber Threats to Critical Information Infrastructure

  2014cites this paper
• Signature Based Intrusion Detection for Zero-Day Attacks: (Not) A Closed Chapter?

  2014cites this paper
• A Framework and Calculation Engine for Modeling and Predicting the Cyber Security of Enterprise Architectures

  2014cites this paper
• A problem shared is a problem halved.

  2014cites this paper
• Vulnerability Markets : Discoverers and Buyers

  2014cites this paper
• Breaking the Cyber-Security Dilemma: Aligning Security Needs and Removing Vulnerabilities

  2014cites this paper
• Software Vulnerability Markets: Discoverers and Buyers

  2014cites this paper
• Cybersecurity and Cyber Weapons: Is Nonproliferation Possible?

  2013cites this paper
• Honeypot Framework for Wireless Sensor Networks

  2013cites this paper
• S A Survey on Software Security Testing Techniques

  2013cites this paper
• Towards Evidence-Based Assessment of Factors Contributing to the Introduction and Detection of Software Vulnerabilities

  2013influential citation
• A Survey on Software Security Testing Techniques

  2013cites this paper
• Trustworthy incident information sharing in social cyber defense alliances

  2013cites this paper
• Markets for zero-day exploits: ethics and implications

  2013cites this paper
• An Empirical Study of Vulnerability Rewards Programs

  2013cites this paper
• The dark side of vulnerability exploitation: a proposal for a research analysis. ?

  2012cites this paper
• A preliminary analysis of vulnerability scores for attacks in wild: the ekits and sym datasets

  2012cites this paper
• Crime Pays If You Are Just an Average Hacker

  2012cites this paper
• Amid the VIPERS Establishing Malware's Position Within the Information Ecosystem

  2011cites this paper
• STUXNET AND THE IMPACT ON ACCELERATOR CONTROL SYSTEMS

  2011cites this paper
• Amid the VIPERS: Establishing Malware's Position within the Information Ecosystem

  2011cites this paper
• Compiler-Generated Software Diversity

  2011cites this paper
• Improving web security by automated extraction of web application intent

  2011cites this paper
• ZDVUE: prioritization of javascript attacks to discover new vulnerabilities

  2011cites this paper
• Vulnerability Black Markets: Empirical Evidence and Scenario Simulation

  2009cites this paper
• Security econometrics The dynamics of (in)security

  2009cites this paper
• Pattern Mining for Future Attacks

  2009cites this paper
• Zero-Day und Less-than-Zero-Day Vulnerabilities und Exploits

  2009cites this paper
• Modelling the Security Ecosystem- The Dynamics of (In)Security

  2009cites this paper
• Fuzzing for Software Security Testing and Quality Assurance

  2008cites this paper
• Using a Mixed Data Collection Strategy to Uncover Vulnerability Black Markets

  2007influential citation
• Most S uccessful V ulnerabilit y D iscoverers : Motivation and Methods

  year unknowncites this paper