Now, let us move on with the key items in bug bounty program.
Faust is Hackl.
A hacker is one who enjoys the intellectual challenge of creatively overcoming limitations.
Now, it can be a bad hacker, also known as a black hat hacker or a white hat hacker who simply hopes
to eliminate the bad hackers depends upon your role and your intellectual ability and your goals.
Hacker power security, we have already seen hacker power security in the last lecture, and I would
like to just put a light on it.
Any goal oriented hacking technique that utilizes the external hacker community to find a nonsecurity
vulnerabilities and reduce cyber risk is known as hacker power security.
Common examples include private bug bounty programs, public but bounty programs, time bound bug bounty
programs, animal.
Now we talk about security testing organizations can identify high value bugs faster with the help of
the results driven through hacker community.
What is hacker power dentist?
A limited access program where selected hackers apply a structured testing methodology and they may
be rewarded for completing security checks is known as hacker power to go to industry.
Which means in taste, you have to apply a typical methodology to find out the results and if the results
are acceptable, you'll get paid.
Now, make sure that there are three types of bug bounty programs, public, private and time bound.
Let us see what they mean.
Public bug bounty program, it is an open program where any hacker can participate in for a chance at
a bounty reward.
Private bug bounty program has limited access program that select hackers are invited to participate
in for a chance at a bounty reward.
For example, you have a company which is not a multinational company, but it's famous in your state.
So that is a public bug bounty program where, you know, your security issues are not top priority
notch or your security issues are not as critical as compared to those of Google and Amazon.
In such cases, Google and Amazon, if they want to find critical bugs that invite experienced hackers
and tell them to find out the bugs that is known as a private Barghuti program, in case of public Bergmann's
you programs, even you can participate.
But in case of private bug bounty programs, if you are selected or invited to do so, then only you
can participate.
Next is time bound bug bounty program.
It is a limited access program with a predetermined time frame where selected hackers have a chance
at earning a bounty reward.
Now, generally, Diamondback bounty programs have high reward, but also have a higher risk because
sometimes they have to charge hackers to participate in the programs.
It's like a hackathon where you have a limited time and you are told to find the bug in the website.
And if you do so, then they pay you according to your skills and the results that you have delivered.
Then what is a vulnerability?
Vulnerability is a weakness of software, hardware or online service that can be exploited.
Now, what is Redzepi, which is vulnerability, disclosure, policy?
And organizations formalized a method for receiving vulnerable submissions from the outside world is
known as vulnerability disclosure policy.
It is sometimes referred to as responsible disclosure.
This often takes the form of security aderet email address, for example, if you are finding bugs for
Google, then you have to report to an inability to security advocate Google dot com.
Now, the practice is outlined in the DOJ framework that the Department of Justice, United States,
for one, that alleged disclosure program for online systems, and it is defined in ISO standard 29
147.
This was all for this lecture.
Make sure you understand these terms, because these are the most fundamental terms you will be needing
while searching a public or private bug bounty program.
In the next lecture, we'll see what exactly a bug bounty program is and how it works.