{"id":"https://openalex.org/W2946540753","doi":"https://doi.org/10.1109/ms.2018.2880508","title":"Bug Bounty Programs for Cybersecurity: Practices, Issues, and Recommendations","display_name":"Bug Bounty Programs for Cybersecurity: Practices, Issues, and Recommendations","publication_year":2019,"publication_date":"2019-05-14","ids":{"openalex":"https://openalex.org/W2946540753","doi":"https://doi.org/10.1109/ms.2018.2880508","mag":"2946540753"},"language":"en","primary_location":{"id":"doi:10.1109/ms.2018.2880508","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ms.2018.2880508","pdf_url":null,"source":{"id":"https://openalex.org/S6725529","display_name":"IEEE Software","issn_l":"0740-7459","issn":["0740-7459","1937-4194"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Software","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5030958068","display_name":"Suresh Malladi","orcid":"https://orcid.org/0000-0003-2184-2058"},"institutions":[{"id":"https://openalex.org/I78715868","display_name":"University of Arkansas at Fayetteville","ror":"https://ror.org/05jbt9m15","country_code":"US","type":"education","lineage":["https://openalex.org/I78715868"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Suresh S. Malladi","raw_affiliation_strings":["Business, University of Arkansas, Fayetteville, Arkansas United States"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Business, University of Arkansas, Fayetteville, Arkansas United States","institution_ids":["https://openalex.org/I78715868"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5009163779","display_name":"Hemang Subramanian","orcid":"https://orcid.org/0000-0002-5095-7607"},"institutions":[{"id":"https://openalex.org/I19700959","display_name":"Florida International University","ror":"https://ror.org/02gz6gg07","country_code":"US","type":"education","lineage":["https://openalex.org/I19700959"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Hemang C. Subramanian","raw_affiliation_strings":["Business, Florida International University, Miami, Florida United States"],"raw_orcid":"https://orcid.org/0000-0002-5095-7607","affiliations":[{"raw_affiliation_string":"Business, Florida International University, Miami, Florida United States","institution_ids":["https://openalex.org/I19700959"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":3.4356,"has_fulltext":false,"cited_by_count":51,"citation_normalized_percentile":{"value":0.93486037,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":100},"biblio":{"volume":"37","issue":"1","first_page":"31","last_page":"39"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9987999796867371,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9968000054359436,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/hacker","display_name":"Hacker","score":0.8578354120254517},{"id":"https://openalex.org/keywords/crowdsourcing","display_name":"Crowdsourcing","score":0.8019924759864807},{"id":"https://openalex.org/keywords/mainstream","display_name":"Mainstream","score":0.6741321682929993},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5867242813110352},{"id":"https://openalex.org/keywords/best-practice","display_name":"Best practice","score":0.5200188159942627},{"id":"https://openalex.org/keywords/quality","display_name":"Quality (philosophy)","score":0.5141082406044006},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5025773048400879},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.3596324920654297},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.3558087944984436},{"id":"https://openalex.org/keywords/engineering-management","display_name":"Engineering management","score":0.34772157669067383},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.31935828924179077},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.2981051206588745},{"id":"https://openalex.org/keywords/management","display_name":"Management","score":0.1357278823852539},{"id":"https://openalex.org/keywords/political-science","display_name":"Political science","score":0.10566151142120361}],"concepts":[{"id":"https://openalex.org/C86844869","wikidata":"https://www.wikidata.org/wiki/Q2798820","display_name":"Hacker","level":2,"score":0.8578354120254517},{"id":"https://openalex.org/C62230096","wikidata":"https://www.wikidata.org/wiki/Q275969","display_name":"Crowdsourcing","level":2,"score":0.8019924759864807},{"id":"https://openalex.org/C2777617010","wikidata":"https://www.wikidata.org/wiki/Q18957","display_name":"Mainstream","level":2,"score":0.6741321682929993},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5867242813110352},{"id":"https://openalex.org/C184356942","wikidata":"https://www.wikidata.org/wiki/Q830382","display_name":"Best practice","level":2,"score":0.5200188159942627},{"id":"https://openalex.org/C2779530757","wikidata":"https://www.wikidata.org/wiki/Q1207505","display_name":"Quality (philosophy)","level":2,"score":0.5141082406044006},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5025773048400879},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.3596324920654297},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.3558087944984436},{"id":"https://openalex.org/C110354214","wikidata":"https://www.wikidata.org/wiki/Q6314146","display_name":"Engineering management","level":1,"score":0.34772157669067383},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.31935828924179077},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.2981051206588745},{"id":"https://openalex.org/C187736073","wikidata":"https://www.wikidata.org/wiki/Q2920921","display_name":"Management","level":1,"score":0.1357278823852539},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.10566151142120361},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0},{"id":"https://openalex.org/C111472728","wikidata":"https://www.wikidata.org/wiki/Q9471","display_name":"Epistemology","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/ms.2018.2880508","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ms.2018.2880508","pdf_url":null,"source":{"id":"https://openalex.org/S6725529","display_name":"IEEE Software","issn_l":"0740-7459","issn":["0740-7459","1937-4194"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Software","raw_type":"journal-article"},{"id":"pmh:oai:digitalcommons.fiu.edu:srhreports-1052","is_oa":false,"landing_page_url":"https://digitalcommons.fiu.edu/srhreports/cybersecurity/cybersecurity/2","pdf_url":null,"source":{"id":"https://openalex.org/S4306401637","display_name":"Florida International University Digital Commons (Florida International University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I19700959","host_organization_name":"Florida International University","host_organization_lineage":["https://openalex.org/I19700959"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Security Research Hub Reports","raw_type":"text"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":15,"referenced_works":["https://openalex.org/W1427242644","https://openalex.org/W1985049490","https://openalex.org/W2041826795","https://openalex.org/W2067978381","https://openalex.org/W2071245556","https://openalex.org/W2085510393","https://openalex.org/W2146455667","https://openalex.org/W2162239230","https://openalex.org/W2200382673","https://openalex.org/W2620762773","https://openalex.org/W2767122007","https://openalex.org/W2780248574","https://openalex.org/W2809507965","https://openalex.org/W4387062313","https://openalex.org/W6628285871"],"related_works":["https://openalex.org/W2748952813","https://openalex.org/W3032998312","https://openalex.org/W1503094549","https://openalex.org/W4384486036","https://openalex.org/W135177976","https://openalex.org/W2337920774","https://openalex.org/W4318823662","https://openalex.org/W2886410948","https://openalex.org/W2025875869","https://openalex.org/W3207526114"],"abstract_inverted_index":{"Drawing":[0],"upon":[1],"crowdsourcing,":[2],"bug":[3],"bounty":[4],"programs":[5],"(BBPs)":[6],"are":[7],"entering":[8],"the":[9],"mainstream":[10],"security":[11],"practice":[12],"in":[13,21],"organizations.":[14],"We":[15],"analyze":[16],"and":[17,37],"recommend":[18],"best":[19],"practices":[20],"five":[22],"main":[23],"BBP":[24],"areas:":[25],"scoping":[26],"of":[27,30],"BBPs,":[28],"timing":[29],"crowd":[31],"engagement,":[32],"submission":[33],"quality,":[34],"firm-researcher":[35],"communication,":[36],"hacker":[38],"motivation.":[39]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":16},{"year":2023,"cited_by_count":10},{"year":2022,"cited_by_count":8},{"year":2021,"cited_by_count":8},{"year":2020,"cited_by_count":3},{"year":2019,"cited_by_count":2}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}