Vulnerability markets
Information on vulnerabilities and information security threads is very valuable. And, in fact, there is a big market, but it’s neither structured nor liquid. Seriously thinking about this fact leads to a couple of questions: Would we live in a more secure world if every geek could go and sell his exploit at the market price? How could this market eventually be organised? What are the incentives of market participants and where are dangers for conflicts of interest?
Rainer Böhme holds a degree in communication science, economics and computer science. He is researcher in the privacy and …