Vulnerability Economics: Understanding the Real Value of Security Flaws in Software

Vulnerabilities within software have become an existential threat to organizations—and the economics around software vulnerabilities shape the behaviors of not just developers, maintainers, and security teams, but the attackers themselves. This is why learning how to defend against attacks needs to be a priority.

Casey Ellis, Founder and CTO, Bugcrowd and Nico Waisman, Head of Github Security Lab will discuss:

• The economics behind software vulnerabilities, starting by identifying the ways zero-day vulnerabilities can be monetized, different buyers and sellers in this space, and how pricing is determined
• Examples of best-practices from real-life events
• Practical suggestions to drive down the number and price of vulnerabilities for any organization