Topic: Bug Bounties

Name: BSidesBHAM
Start: 2019-10-12T00:00:00-04:00
End: 2019-10-12T23:59:59-04:00
Location: Birmingham

Digest Article

How One Teenager Took Out a Secure Pentagon File Sharing Site

Posted: 09/03/2019 | Leave a Comment

On Oct. 25, Cable, who worked for the Defense Digital Service and was a freshman at Stanford University, reported a problem to the department through the Pentagon's HackerOne vulnerability disclosure page. Read More

Digest Article

Apple Upgrades Bug Bounty Program: Adds Macs, $1M Reward

Posted: 08/20/2019 | Leave a Comment

The device manufacturer in a Thursday Black Hat USA 2019 session said it will open the historically private program to all researchers in the fall. In addition, it plans to drastically boost some rewards for vulnerabilities found in its devices - including a $1 million payout - and adding a much-wanted program for its Mac devices. Read More

Digest Article

The Pentagon’s Bug Bounty Program Should Be Expanded to Bases, DOD Official Says

Posted: 05/02/2017 | Leave a Comment

The Hack the Pentagon bug bounty program that allowed citizens to test the defenses of Defense Department websites could soon see a spinoff inviting hackers to probe the Pentagon’s critical infrastructure. Read More

Digest Article

Air Force Issues Challenge to “Hack the Air Force”

Posted: 05/02/2017 | Leave a Comment

The event expands on the DoD 'Hack the Pentagon' bug bounty program by broadening the participation pool from U.S. citizens to include "white hat" hackers from the United Kingdom, Canada, Australia and New Zealand. Read More

Request for Information - Cyber Community of Interest (CoI) Study on Technology Future and Science & Technology (S&T) Investment

The Cyber CoI is conducting a study to identify important new technologies and applications that are likely to have major impact on the Cyber S&T (applied research and advanced technology development) investments in near (now till 2025), mid (2025-2030) and far (beyond 2030) term future.

Learn More

CSIAC Report - Evolving Developments in Cyberlaw:
June 2019

CSIAC SME and member of the American Bar Association’s Information Security Committee, Richard “Rick” Aldrich, gives an updated snapshot of evolving developments in cyberlaw, policy, standards, court cases and industry legal frameworks. These slides provide updates to an earlier report on cyberlaw from March of 2019.

View the Slides

CSIAC Journal - Launching Innovation Through Medical Modeling and Simulation Technologies

This edition of the CSIAC Journal highlights three very different views of complex situations where AI might, should, and does intersect with our ability to use AI effectively.

Read the Journal

The DoD Cybersecurity Policy Chart

This chart captures the tremendous breadth of applicable policies, some of which many cybersecurity professionals may not even be aware, in a helpful organizational scheme.

View the Policy Chart

CSIAC Report - JFAC/DAU/CSIAC Cyber Experiment (CYBEX)

This report details key concerns discussed during the JFAC/DAU/CSIAC Software Assurance (SwA) Cyber Experiment (CYBEX). In addition to evaluating newly developed SwA guides for program managers and developers, the exchange included addressing/bringing back foundational software/system engineering concepts to address root of fundamental SwA issues as well as adopting common language in the areas of functionality and risk in order to identify issues early.

Read the Report