Developing a gamified peer-reviewed bug bounty programme

Jamie O'Hare; Lynsay A. Shepherd

doi:10.1007/978-3-031-06394-7_65

Developing a gamified peer-reviewed bug bounty programme

Jamie O'Hare
, Lynsay A. Shepherd^*

^*Corresponding author for this work

Department of Cybersecurity and Computing

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

2 Citations (Scopus)

176 Downloads (Pure)

Abstract

Bug bounty processes have remained broadly unchanged since their inception. Existing literature recognises that current methods generate intensive resource demands, impacting upon programme effectiveness. This paper proposes a novel implementation which aims to alleviate resource demands and mitigate inherent issues through gamification. This incorporates the use of additional crowdsourcing of vulnerability verification and reproduction by peers, allowing the client organisation to reduce overheads at the cost of rewarding participants. The system has the potential to be used in Higher Education Institutions which typically face resource and budget constraints.

Original language	English
Title of host publication	HCI International 2022 Posters
Subtitle of host publication	24th International Conference on Human-Computer Interaction, HCII 2022, Virtual Event, June 26 – July 1, 2022, Proceedings
Editors	Constantine Stephanidis, Margherita Antona, Stavroula Ntoa
Place of Publication	Cham
Publisher	Springer
Pages	514-522
Number of pages	9
Volume	part IV
ISBN (Electronic)	9783031063947
ISBN (Print)	9783031063930
DOIs	https://doi.org/10.1007/978-3-031-06394-7_65
Publication status	Published - 16 Jun 2022
Event	24th International Conference on Human-Computer Interaction - Online Duration: 26 Jun 2022 → 1 Jul 2022 Conference number: 24th https://2022.hci.international/

Publication series

Name	Communications in Computer and Information Science (CCIS)
Publisher	Springer
Volume	1583
ISSN (Print)	1865-0929
ISSN (Electronic)	1865-0937

Conference

Conference	24th International Conference on Human-Computer Interaction
Abbreviated title	HCI International 2022
Period	26/06/22 → 1/07/22
Internet address	https://2022.hci.international/

UN SDGs

This output contributes to the following UN Sustainable Development Goals (SDGs)

SDG 4 Quality Education
SDG 9 Industry, Innovation, and Infrastructure

Keywords

Bug Boutny
Ethical hacking
Human-computer interaction
Gamification
Higher education

Access to Document

10.1007/978-3-031-06394-7_65

Shepherd_DevelopingAGamifiedPeer-ReviewedBug_Accepted_2022Accepted author manuscript, 587 KB

Proposal of a novel bug bounty implementation using gamification
O'Hare, J. & Shepherd, L. A., 21 Sept 2020, arXiv, p. 1-11, 11 p.
Research output: Working paper/Preprint › Preprint

Cite this

O'Hare, J., & Shepherd, L. A. (2022). Developing a gamified peer-reviewed bug bounty programme. In C. Stephanidis, M. Antona, & S. Ntoa (Eds.), HCI International 2022 Posters: 24th International Conference on Human-Computer Interaction, HCII 2022, Virtual Event, June 26 – July 1, 2022, Proceedings (Vol. part IV, pp. 514-522). (Communications in Computer and Information Science (CCIS); Vol. 1583). Springer. https://doi.org/10.1007/978-3-031-06394-7_65

O'Hare, Jamie ; Shepherd, Lynsay A. / Developing a gamified peer-reviewed bug bounty programme. HCI International 2022 Posters: 24th International Conference on Human-Computer Interaction, HCII 2022, Virtual Event, June 26 – July 1, 2022, Proceedings. editor / Constantine Stephanidis ; Margherita Antona ; Stavroula Ntoa. Vol. part IV Cham : Springer, 2022. pp. 514-522 (Communications in Computer and Information Science (CCIS)).

@inproceedings{d01c3b16b28247f1b415d86e32f17efb,

title = "Developing a gamified peer-reviewed bug bounty programme",

abstract = "Bug bounty processes have remained broadly unchanged since their inception. Existing literature recognises that current methods generate intensive resource demands, impacting upon programme effectiveness. This paper proposes a novel implementation which aims to alleviate resource demands and mitigate inherent issues through gamification. This incorporates the use of additional crowdsourcing of vulnerability verification and reproduction by peers, allowing the client organisation to reduce overheads at the cost of rewarding participants. The system has the potential to be used in Higher Education Institutions which typically face resource and budget constraints.",

author = "Jamie O'Hare and Shepherd, \{Lynsay A.\}",

note = "{\textcopyright} 2022, The Author(s), under exclusive license to Springer Nature Switzerland AG. Data availability statement: Not present.; 24th International Conference on Human-Computer Interaction, HCI International 2022 ; Conference date: 26-06-2022 Through 01-07-2022",

year = "2022",

month = jun,

day = "16",

doi = "10.1007/978-3-031-06394-7\_65",

language = "English",

isbn = "9783031063930",

volume = "part IV",

series = "Communications in Computer and Information Science (CCIS)",

publisher = "Springer",

pages = "514--522",

editor = "Constantine Stephanidis and Margherita Antona and Stavroula Ntoa",

booktitle = "HCI International 2022 Posters",

url = "https://2022.hci.international/",

}

O'Hare, J & Shepherd, LA 2022, Developing a gamified peer-reviewed bug bounty programme. in C Stephanidis, M Antona & S Ntoa (eds), HCI International 2022 Posters: 24th International Conference on Human-Computer Interaction, HCII 2022, Virtual Event, June 26 – July 1, 2022, Proceedings. vol. part IV, Communications in Computer and Information Science (CCIS), vol. 1583, Springer, Cham, pp. 514-522, 24th International Conference on Human-Computer Interaction, 26/06/22. https://doi.org/10.1007/978-3-031-06394-7_65

Developing a gamified peer-reviewed bug bounty programme. / O'Hare, Jamie ; Shepherd, Lynsay A.
HCI International 2022 Posters: 24th International Conference on Human-Computer Interaction, HCII 2022, Virtual Event, June 26 – July 1, 2022, Proceedings. ed. / Constantine Stephanidis; Margherita Antona; Stavroula Ntoa. Vol. part IV Cham: Springer, 2022. p. 514-522 (Communications in Computer and Information Science (CCIS); Vol. 1583).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

TY - GEN

T1 - Developing a gamified peer-reviewed bug bounty programme

AU - O'Hare, Jamie

AU - Shepherd, Lynsay A.

N1 - Conference code: 24th

PY - 2022/6/16

Y1 - 2022/6/16

N2 - Bug bounty processes have remained broadly unchanged since their inception. Existing literature recognises that current methods generate intensive resource demands, impacting upon programme effectiveness. This paper proposes a novel implementation which aims to alleviate resource demands and mitigate inherent issues through gamification. This incorporates the use of additional crowdsourcing of vulnerability verification and reproduction by peers, allowing the client organisation to reduce overheads at the cost of rewarding participants. The system has the potential to be used in Higher Education Institutions which typically face resource and budget constraints.

AB - Bug bounty processes have remained broadly unchanged since their inception. Existing literature recognises that current methods generate intensive resource demands, impacting upon programme effectiveness. This paper proposes a novel implementation which aims to alleviate resource demands and mitigate inherent issues through gamification. This incorporates the use of additional crowdsourcing of vulnerability verification and reproduction by peers, allowing the client organisation to reduce overheads at the cost of rewarding participants. The system has the potential to be used in Higher Education Institutions which typically face resource and budget constraints.

U2 - 10.1007/978-3-031-06394-7_65

DO - 10.1007/978-3-031-06394-7_65

M3 - Conference contribution

SN - 9783031063930

VL - part IV

T3 - Communications in Computer and Information Science (CCIS)

SP - 514

EP - 522

BT - HCI International 2022 Posters

A2 - Stephanidis, Constantine

A2 - Antona, Margherita

A2 - Ntoa, Stavroula

PB - Springer

CY - Cham

T2 - 24th International Conference on Human-Computer Interaction

Y2 - 26 June 2022 through 1 July 2022

ER -

O'Hare J , Shepherd LA. Developing a gamified peer-reviewed bug bounty programme. In Stephanidis C, Antona M, Ntoa S, editors, HCI International 2022 Posters: 24th International Conference on Human-Computer Interaction, HCII 2022, Virtual Event, June 26 – July 1, 2022, Proceedings. Vol. part IV. Cham: Springer. 2022. p. 514-522. (Communications in Computer and Information Science (CCIS)). Epub 2022 Jun 16. doi: 10.1007/978-3-031-06394-7_65

Developing a gamified peer-reviewed bug bounty programme

Abstract

Publication series

Conference

UN SDGs

Keywords

Access to Document

Fingerprint

Research output

Proposal of a novel bug bounty implementation using gamification

Cite this