Artificial Bugs for Crowdsearch

arXiv:2403.09484v1 Announce Type: cross
Abstract: Bug bounty programs, where external agents are invited to search and report vulnerabilities (bugs) in exchange for rewards (bounty), have become a major tool for companies to improve their systems. We suggest augmenting such programs by inserting artificial bugs to increase the incentives to search for real (organic) bugs. Using a model of crowdsearch, we identify the efficiency gains by artificial bugs, and we show that for this, it is sufficient to insert only one …

artificial arxiv bounty bug bug bounty bug bounty programs bugs companies cs.cr exchange external incentives major organic real report rewards search systems tool vulnerabilities