Security Blog
The latest news and insights from Google on security and safety on the Internet
Announcing New Abuse Research Grants Program
4 de junio de 2021
Posted by Anna Hupa, Marc Henson, and Martin Straka, Google VRP Team
Our Abuse Bug Bounty program has proved tremendously successful in the past three years since its introduction – thanks to our incredibly engaged community of researchers. Their contributions resulted in +1,000 valid bugs, helping us raise the bar in combating
product abuse
.
As a result of this continued success, today we are announcing a new experimental Abuse Research Grants Program in addition to the already existing
Vulnerability Research Grants
. Similar to other Research Grant Programs, these grants are up-front awards that our top researchers will receive before they ever submit a bug.
Last year, we
increased our rewards
to recognize the important work of our community. The growth of this program would not have been possible without partners like David (
@xdavidhu
), Zohar (
ehpus.com
), and Ademar (
@nowaskyjr
) who, on top of becoming our top research experts in
Product Abuse
, regularly contribute to transparency by sharing their work, further inspiring and influencing our community of researchers.
Despite the growth and success of this program, there remains more work to be done.
With our new Abuse Research Grants Program, we hope to bring even more awareness to product abuse by connecting more closely with our experienced researchers – so we can all work together to overcome these challenges, prevent product abuse and keep our users safe. Here’s how the program works:
We invite our top abuse researchers to the program.
We award grants immediately before research begins, no strings attached.
Bug Hunters apply for the targets we share with them and start their research.
On top of the grant, researchers are eligible for regular rewards for the bugs they discover in scope of
our Bug Bounty program
.
To learn more about this and other grant programs, visit
our rules page
.
No hay comentarios :
Publicar un comentario
Etiquetas
#sharethemicincyber
#supplychain #security #opensource
android
android security
android tr
app security
big data
biometrics
blackhat
C++
chrome
chrome enterprise
chrome security
connected devices
CTF
diversity
encryption
federated learning
fuzzing
Gboard
google play
google play protect
hacking
interoperability
iot security
kubernetes
linux kernel
memory safety
Open Source
pha family highlights
pixel
privacy
private compute core
Rowhammer
rust
Security
security rewards program
sigstore
spyware
supply chain
targeted spyware
tensor
Titan M2
VDP
vulnerabilities
workshop
Archive
2024
nov
oct
sept
ago
jul
jun
may
abr
mar
feb
ene
2023
dic
nov
oct
sept
ago
jul
jun
may
abr
mar
feb
ene
2022
dic
nov
oct
sept
ago
jul
jun
may
abr
mar
feb
ene
2021
dic
nov
oct
sept
ago
jul
jun
may
abr
mar
feb
ene
2020
dic
nov
oct
sept
ago
jul
jun
may
abr
mar
feb
ene
2019
dic
nov
oct
sept
ago
jul
jun
may
abr
mar
feb
ene
2018
dic
nov
oct
sept
ago
jul
jun
may
abr
mar
feb
ene
2017
dic
nov
oct
sept
jul
jun
may
abr
mar
feb
ene
2016
dic
nov
oct
sept
ago
jul
jun
may
abr
mar
feb
ene
2015
dic
nov
oct
sept
ago
jul
jun
may
abr
mar
feb
ene
2014
dic
nov
oct
sept
ago
jul
jun
abr
mar
feb
ene
2013
dic
nov
oct
ago
jun
may
abr
mar
feb
ene
2012
dic
sept
ago
jun
may
abr
mar
feb
ene
2011
dic
nov
oct
sept
ago
jul
jun
may
abr
mar
feb
2010
nov
oct
sept
ago
jul
may
abr
mar
2009
nov
oct
ago
jul
jun
mar
2008
dic
nov
oct
ago
jul
may
feb
2007
nov
oct
sept
jul
jun
may
Feed
Follow @google
Follow
Give us feedback in our
Product Forums
.
Follow
No hay comentarios :
Publicar un comentario