{"id":"https://openalex.org/W2998620069","doi":"https://doi.org/10.4018/jdm.2020010103","title":"Bug Bounty Marketplaces and Enabling Responsible Vulnerability Disclosure","display_name":"Bug Bounty Marketplaces and Enabling Responsible Vulnerability Disclosure","publication_year":2019,"publication_date":"2019-12-12","ids":{"openalex":"https://openalex.org/W2998620069","doi":"https://doi.org/10.4018/jdm.2020010103","mag":"2998620069"},"language":"en","primary_location":{"id":"doi:10.4018/jdm.2020010103","is_oa":false,"landing_page_url":"https://doi.org/10.4018/jdm.2020010103","pdf_url":null,"source":{"id":"https://openalex.org/S73024538","display_name":"Journal of Database Management","issn_l":"1063-8016","issn":["1063-8016","1533-8010"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320424","host_organization_name":"IGI Global","host_organization_lineage":["https://openalex.org/P4310320424"],"host_organization_lineage_names":["IGI Global"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Database Management","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5009163779","display_name":"Hemang Subramanian","orcid":"https://orcid.org/0000-0002-5095-7607"},"institutions":[{"id":"https://openalex.org/I19700959","display_name":"Florida International University","ror":"https://ror.org/02gz6gg07","country_code":"US","type":"education","lineage":["https://openalex.org/I19700959"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Hemang Chamakuzhi Subramanian","raw_affiliation_strings":["Florida International University, Miami, USA"],"raw_orcid":"https://orcid.org/0000-0002-5095-7607","affiliations":[{"raw_affiliation_string":"Florida International University, Miami, USA","institution_ids":["https://openalex.org/I19700959"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5030958068","display_name":"Suresh Malladi","orcid":"https://orcid.org/0000-0003-2184-2058"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Suresh Malladi","raw_affiliation_strings":["Cybersecurity Researcher & Consultant, Fayetteville, USA"],"raw_orcid":"https://orcid.org/0000-0003-2184-2058","affiliations":[{"raw_affiliation_string":"Cybersecurity Researcher & Consultant, Fayetteville, USA","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":3.4556,"has_fulltext":false,"cited_by_count":20,"citation_normalized_percentile":{"value":0.94088768,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":98},"biblio":{"volume":"31","issue":"1","first_page":"38","last_page":"63"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9983999729156494,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9983999729156494,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12519","display_name":"Cybercrime and Law Enforcement Studies","score":0.9976999759674072,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9958000183105469,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/hacker","display_name":"Hacker","score":0.6543912887573242},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6248543858528137},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.557858943939209},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.5363636612892151},{"id":"https://openalex.org/keywords/incentive","display_name":"Incentive","score":0.5342807769775391},{"id":"https://openalex.org/keywords/cybercrime","display_name":"Cybercrime","score":0.5305963754653931},{"id":"https://openalex.org/keywords/vendor","display_name":"Vendor","score":0.5119410753250122},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.48900946974754333},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.4755094647407532},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.466743528842926},{"id":"https://openalex.org/keywords/intermediary","display_name":"Intermediary","score":0.44097137451171875},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.3990020453929901},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.19242358207702637},{"id":"https://openalex.org/keywords/marketing","display_name":"Marketing","score":0.168796569108963},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.1250056028366089}],"concepts":[{"id":"https://openalex.org/C86844869","wikidata":"https://www.wikidata.org/wiki/Q2798820","display_name":"Hacker","level":2,"score":0.6543912887573242},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6248543858528137},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.557858943939209},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.5363636612892151},{"id":"https://openalex.org/C29122968","wikidata":"https://www.wikidata.org/wiki/Q1414816","display_name":"Incentive","level":2,"score":0.5342807769775391},{"id":"https://openalex.org/C2779390178","wikidata":"https://www.wikidata.org/wiki/Q29137","display_name":"Cybercrime","level":3,"score":0.5305963754653931},{"id":"https://openalex.org/C2777338717","wikidata":"https://www.wikidata.org/wiki/Q1762621","display_name":"Vendor","level":2,"score":0.5119410753250122},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.48900946974754333},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.4755094647407532},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.466743528842926},{"id":"https://openalex.org/C139569457","wikidata":"https://www.wikidata.org/wiki/Q1666223","display_name":"Intermediary","level":2,"score":0.44097137451171875},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.3990020453929901},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.19242358207702637},{"id":"https://openalex.org/C162853370","wikidata":"https://www.wikidata.org/wiki/Q39809","display_name":"Marketing","level":1,"score":0.168796569108963},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.1250056028366089},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0},{"id":"https://openalex.org/C175444787","wikidata":"https://www.wikidata.org/wiki/Q39072","display_name":"Microeconomics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.4018/jdm.2020010103","is_oa":false,"landing_page_url":"https://doi.org/10.4018/jdm.2020010103","pdf_url":null,"source":{"id":"https://openalex.org/S73024538","display_name":"Journal of Database Management","issn_l":"1063-8016","issn":["1063-8016","1533-8010"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320424","host_organization_name":"IGI Global","host_organization_lineage":["https://openalex.org/P4310320424"],"host_organization_lineage_names":["IGI Global"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Database Management","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.7799999713897705,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":56,"referenced_works":["https://openalex.org/W1427242644","https://openalex.org/W1563025380","https://openalex.org/W1580060001","https://openalex.org/W1628063087","https://openalex.org/W1980595883","https://openalex.org/W1985049490","https://openalex.org/W2010896594","https://openalex.org/W2021348304","https://openalex.org/W2025610165","https://openalex.org/W2041826795","https://openalex.org/W2043574861","https://openalex.org/W2051046475","https://openalex.org/W2067978381","https://openalex.org/W2071635905","https://openalex.org/W2085510393","https://openalex.org/W2098569569","https://openalex.org/W2109338844","https://openalex.org/W2113585710","https://openalex.org/W2114712239","https://openalex.org/W2117405938","https://openalex.org/W2136151078","https://openalex.org/W2155597028","https://openalex.org/W2288264901","https://openalex.org/W2295069226","https://openalex.org/W2365417624","https://openalex.org/W2495607404","https://openalex.org/W2513442265","https://openalex.org/W2520816865","https://openalex.org/W2547695167","https://openalex.org/W2582734111","https://openalex.org/W2753514269","https://openalex.org/W2766615649","https://openalex.org/W2767122007","https://openalex.org/W2793496850","https://openalex.org/W2794659749","https://openalex.org/W2801839096","https://openalex.org/W2807817807","https://openalex.org/W2884254948","https://openalex.org/W2890156997","https://openalex.org/W2893135415","https://openalex.org/W2894616207","https://openalex.org/W2895636773","https://openalex.org/W2901269799","https://openalex.org/W2905131172","https://openalex.org/W2946540753","https://openalex.org/W2963659387","https://openalex.org/W2963863248","https://openalex.org/W2966983806","https://openalex.org/W2970434416","https://openalex.org/W3022786120","https://openalex.org/W3102446060","https://openalex.org/W3123365097","https://openalex.org/W3123608300","https://openalex.org/W3194836746","https://openalex.org/W4213379127","https://openalex.org/W6989638567"],"related_works":["https://openalex.org/W2338899373","https://openalex.org/W199254545","https://openalex.org/W2997836625","https://openalex.org/W3115072666","https://openalex.org/W3113358185","https://openalex.org/W2808249021","https://openalex.org/W3040987670","https://openalex.org/W4362572734","https://openalex.org/W3006507989","https://openalex.org/W197818113"],"abstract_inverted_index":{"Cybercrime":[0],"caused":[1],"by":[2,38],"exploited":[3],"vulnerabilities":[4,14,123],"bears":[5],"a":[6,75,108,165,186],"huge":[7],"burden":[8],"on":[9,107],"societies.":[10],"Most":[11],"of":[12,44,71,77,82,96,105,129,191,199],"these":[13],"are":[15,42,118,149],"detectable,":[16],"and":[17,25,40,59,62,73,85,131,139,159,176,181,188,193],"the":[18,45,69,92,127,143],"damage":[19],"is":[20],"preventable":[21],"if":[22],"software":[23,30,54],"vendors":[24,39,55],"firms":[26],"that":[27,52,116,146,155],"deploy":[28],"such":[29,64],"adopt":[31],"right":[32],"practices.":[33],"Bug":[34],"Bounty":[35],"Programs":[36],"(BBPs)":[37],"intermediaries":[41],"one":[43],"most":[46],"important":[47],"creations":[48],"in":[49,124,178],"recent":[50],"years,":[51],"helps":[53],"to":[56,60,121,151,153,184,196],"create":[57],"marketplaces":[58],"detect":[61],"prevent":[63],"exploits.":[65],"This":[66],"article":[67],"develops":[68],"theory":[70],"BBPs":[72,78,97,106,117,154],"present":[74],"typology":[76],"using":[79,98],"established":[80],"theories":[81],"incentive":[83],"compatibility":[84],"mechanism":[86],"design.":[87],"The":[88,112],"authors":[89],"empirically":[90],"analyze":[91],"market":[93],"creation":[94],"function":[95],"granular":[99],"data":[100],"from":[101],"two":[102],"different":[103],"types":[104],"popular":[109],"intermediary":[110],"platform.":[111],"research":[113],"findings":[114,172],"suggest":[115],"valuable":[119],"opportunities":[120],"source":[122],"software;":[125],"nevertheless,":[126],"rate":[128],"disclosure":[130],"hacker":[132],"participation":[133],"marginally":[134],"increases":[135],"with":[136,164],"vendor's":[137],"rewards":[138],"other":[140],"incentives.":[141],"Similarly,":[142],"results":[144],"show":[145],"security":[147,180],"researchers":[148,175],"motivated":[150],"contribute":[152],"offer":[156],"higher":[157,166],"remuneration":[158],"not":[160],"just":[161],"those":[162],"programs":[163],"likelihood":[167],"for":[168],"bug":[169],"discovery.":[170],"Our":[171],"will":[173],"help":[174],"practitioners":[177],"information":[179],"allied":[182],"domains":[183],"develop":[185],"theoretical":[187],"empirical":[189],"perspective":[190],"BBPs,":[192],"their":[194],"usefulness":[195],"curb":[197],"incidents":[198],"cybercrime.":[200]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":6},{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":4},{"year":2021,"cited_by_count":4},{"year":2019,"cited_by_count":1}],"updated_date":"2026-07-15T18:14:33.161393","created_date":"2025-10-10T00:00:00"}