한국 버그 바운티 프로그램의 제도적인 문제점과 해결방안

• 영문명: Problems and Solutions of the Korean Bug Bounty Program
• 발행기관: 한국IT서비스학회
• 저자명: 박혜성(Hye Sung Park) 권헌영(Kwon Hun Yeong)
• 간행물 정보: 『한국IT서비스학회지』한국IT서비스학회지 제18권 제5호, 53~70쪽, 전체 18쪽
• 주제분류: 경제경영 > 경영학
• 파일형태: PDF
• 발행일자: 2019.12.30

영문 초록

As information security becomes more important as the fourth industrial revolution gradually emerges, an efficient and effective way to find vulnerabilities in information systems is becoming an essential requirement of information security. As the point of the protection of current information and the protection of the future industry, the Korean government has paid attention to the bug bounty, which has been recognized for its efficiency and effectiveness and has implemented through the Korea Internet Security Agency s S/W vulnerability bug bounty program. However, there are growing problems about the S/W vulnerability bug bounty program of the Korea Internet Security Agency, which has been operating for about 7 years. The purpose of this study is to identify the problems in Korean bug bounty policies through the characteristics of the bug bounty program, and to suggest the direction of the government s policy to activate the bug bounty like changes in the government s approach utilizing the market.

목차

1. 서 론

2. 버그 바운티의 정의 및 특징

3. 국내·외 버그 바운티 정책 현황

4. 한국 버그 바운티 정책의 문제점과 해결방안

5. 결 론

키워드

Bug Bounty Vulnerability market Crowdsourcing KISA