26. What That Means with Camille: Crowdsourced Security and Bug Bounty

<p><span style="font-weight: 400;">In this episode of</span> <em><span style="font-weight: 400;">What That Means</span></em><span style="font-weight: 400;">, we’re talking crowdsourced security and bug bounty, and we’ve got a treat for you: double the brilliance with Katie Noble and Alexander Romero (RoRo). Both are Directors of PSIRT at Intel and both have extensive experience in cyber security as DC veterans (think Department of Homeland Security and the Pentagon).</span></p> <p> </p> <p><span style="font-weight: 400;">Our convo covers:</span></p> <p><span style="font-weight: 400;">•  The flavors of bug bounties</span></p> <p> </p> <p><span style="font-weight: 400;">•  Crowdsourced security</span></p> <p> </p> <p><span style="font-weight: 400;">• </span> <span style= "font-weight: 400;">Vulnerability Disclosure Programs (VDPs)</span></p> <p> </p> <p><span style="font-weight: 400;">•  Security Technical Implementation Guides (STIGs)</span></p> <p> </p> <p><span style="font-weight: 400;">•  CSIRT & PSIRT</span></p> <p> </p> <p><span style="font-weight: 400;">•  Hackcidents </span></p> <p> </p> <p><span style="font-weight: 400;">•  Red teams, blue teams, purple teams</span></p> <p> </p> <p><span style="font-weight: 400;">•  IoT</span></p> <p> </p> <p><span style="font-weight: 400;">...and more!  Join me for an interesting and insightful conversation. </span></p> <p> </p> <p><strong>Here are some key take-aways:</strong></p> <p> </p> <p><span style="font-weight: 400;">•  Crowdsourced security relies on the wisdom of the crowd to find vulnerabilities in systems that might otherwise be missed. </span></p> <p> </p> <p><span style="font-weight: 400;">•  Bug bounties differ from VDPs in that they’re more of an invitation to find vulnerabilities and report back to the vendor. With bug bounties, there’s also an incentive (sometimes financial, sometimes not).</span></p> <p> </p> <p><span style="font-weight: 400;">•  Bug bounty incentives can include money, airline miles, lunch with important people, pieces of hardware, and