{"id":"https://openalex.org/W2155597028","doi":"https://doi.org/10.1145/2663887.2663906","title":"An Exploratory Study of White Hat Behaviors in a Web Vulnerability Disclosure Program","display_name":"An Exploratory Study of White Hat Behaviors in a Web Vulnerability Disclosure Program","publication_year":2014,"publication_date":"2014-11-07","ids":{"openalex":"https://openalex.org/W2155597028","doi":"https://doi.org/10.1145/2663887.2663906","mag":"2155597028"},"language":"en","primary_location":{"id":"doi:10.1145/2663887.2663906","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2663887.2663906","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2014 ACM Workshop on Security Information Workers","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5041526853","display_name":"Mingyi Zhao","orcid":"https://orcid.org/0000-0002-2884-0736"},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Mingyi Zhao","raw_affiliation_strings":["Pennsylvania State University, State College, PA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Pennsylvania State University, State College, PA, USA","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5063714878","display_name":"Jens Gro\u00dfklags","orcid":"https://orcid.org/0000-0003-1093-1282"},"institutions":[{"id":"https://openalex.org/I130769515","display_name":"Pennsylvania State University","ror":"https://ror.org/04p491231","country_code":"US","type":"education","lineage":["https://openalex.org/I130769515"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jens Grossklags","raw_affiliation_strings":["Pennsylvania State University, State College, PA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Pennsylvania State University, State College, PA, USA","institution_ids":["https://openalex.org/I130769515"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100664328","display_name":"Kai Chen","orcid":"https://orcid.org/0009-0000-2796-7375"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Kai Chen","raw_affiliation_strings":["Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":41,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"51","last_page":"58"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9987999796867371,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9987999796867371,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9983000159263611,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9969000220298767,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.8310314416885376},{"id":"https://openalex.org/keywords/white-paper","display_name":"White paper","score":0.6977042555809021},{"id":"https://openalex.org/keywords/white","display_name":"White (mutation)","score":0.6207356452941895},{"id":"https://openalex.org/keywords/vulnerability-assessment","display_name":"Vulnerability assessment","score":0.5035175681114197},{"id":"https://openalex.org/keywords/diversity","display_name":"Diversity (politics)","score":0.44909557700157166},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.40542301535606384},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.3588178753852844},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.32219749689102173},{"id":"https://openalex.org/keywords/political-science","display_name":"Political science","score":0.3030475378036499},{"id":"https://openalex.org/keywords/psychology","display_name":"Psychology","score":0.2862146496772766},{"id":"https://openalex.org/keywords/social-psychology","display_name":"Social psychology","score":0.1490539312362671},{"id":"https://openalex.org/keywords/psychological-resilience","display_name":"Psychological resilience","score":0.08660927414894104},{"id":"https://openalex.org/keywords/biology","display_name":"Biology","score":0.07634314894676208}],"concepts":[{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.8310314416885376},{"id":"https://openalex.org/C2778605646","wikidata":"https://www.wikidata.org/wiki/Q223729","display_name":"White paper","level":2,"score":0.6977042555809021},{"id":"https://openalex.org/C56273599","wikidata":"https://www.wikidata.org/wiki/Q3122841","display_name":"White (mutation)","level":3,"score":0.6207356452941895},{"id":"https://openalex.org/C167063184","wikidata":"https://www.wikidata.org/wiki/Q1400839","display_name":"Vulnerability assessment","level":3,"score":0.5035175681114197},{"id":"https://openalex.org/C2781316041","wikidata":"https://www.wikidata.org/wiki/Q1230584","display_name":"Diversity (politics)","level":2,"score":0.44909557700157166},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.40542301535606384},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.3588178753852844},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.32219749689102173},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.3030475378036499},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.2862146496772766},{"id":"https://openalex.org/C77805123","wikidata":"https://www.wikidata.org/wiki/Q161272","display_name":"Social psychology","level":1,"score":0.1490539312362671},{"id":"https://openalex.org/C137176749","wikidata":"https://www.wikidata.org/wiki/Q4105337","display_name":"Psychological resilience","level":2,"score":0.08660927414894104},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.07634314894676208},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/2663887.2663906","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2663887.2663906","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2014 ACM Workshop on Security Information Workers","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Decent work and economic growth","score":0.6100000143051147,"id":"https://metadata.un.org/sdg/8"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":21,"referenced_works":["https://openalex.org/W172316423","https://openalex.org/W1427242644","https://openalex.org/W1603939896","https://openalex.org/W1628063087","https://openalex.org/W1971733255","https://openalex.org/W1987971958","https://openalex.org/W2041826795","https://openalex.org/W2079987460","https://openalex.org/W2090044595","https://openalex.org/W2107449619","https://openalex.org/W2113585710","https://openalex.org/W2114712239","https://openalex.org/W2136151078","https://openalex.org/W2149764216","https://openalex.org/W2168234580","https://openalex.org/W2255889910","https://openalex.org/W2463095032","https://openalex.org/W2914982603","https://openalex.org/W2950627632","https://openalex.org/W3141872514","https://openalex.org/W4238243588"],"related_works":["https://openalex.org/W1883246888","https://openalex.org/W2370114625","https://openalex.org/W1756374135","https://openalex.org/W2062873522","https://openalex.org/W2947584067","https://openalex.org/W2184303792","https://openalex.org/W2280562859","https://openalex.org/W230721595","https://openalex.org/W3157230915","https://openalex.org/W1496728123"],"abstract_inverted_index":{"White":[0],"hats":[1,43],"are":[2],"making":[3],"significant":[4],"contributions":[5,39,85],"to":[6,13,123],"cybersecurity":[7],"by":[8,31],"submitting":[9],"vulnerability":[10,15,20,49,60,110,128],"discovery":[11,129],"reports":[12],"public":[14],"disclosure":[16,61],"programs":[17],"and":[18,44,102,118],"company-initiated":[19],"reward":[21],"programs.":[22],"In":[23,89],"this":[24,107],"paper,":[25],"we":[26,91],"study":[27],"white":[28,42,77,83,99],"hat":[29,78,100],"behaviors":[30],"analyzing":[32],"a":[33],"3.5-year":[34],"dataset":[35,52],"which":[36],"documents":[37],"the":[38,57,76,95,104,127],"of":[40,106,126],"3254":[41],"their":[45],"submitted":[46],"16446":[47],"Web":[48,59],"reports.":[50],"Our":[51,112],"is":[53,70],"collected":[54],"from":[55,75],"Wooyun,":[56],"predominant":[58],"program":[62],"in":[63],"China.":[64],"We":[65,80],"first":[66],"show":[67],"that":[68,115],"Wooyun":[69],"continuously":[71],"attracting":[72],"new":[73],"contributors":[74],"community.":[79],"then":[81],"examine":[82],"hats'":[84],"along":[86],"several":[87],"dimensions.":[88],"particular,":[90],"provide":[92],"evidence":[93],"about":[94],"diversity":[96,108],"inside":[97],"Wooyun's":[98],"community":[101],"discuss":[103],"importance":[105],"for":[109],"discovery.":[111],"results":[113],"suggest":[114],"more":[116,120],"participation,":[117],"thereby":[119],"diversity,":[121],"contributes":[122],"higher":[124],"productivity":[125],"process.":[130]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":5},{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":6},{"year":2020,"cited_by_count":4},{"year":2019,"cited_by_count":5},{"year":2018,"cited_by_count":3},{"year":2017,"cited_by_count":6},{"year":2016,"cited_by_count":2},{"year":2015,"cited_by_count":4}],"updated_date":"2026-07-22T07:51:19.307946","created_date":"2025-10-10T00:00:00"}