Vulnerability Bazaar
David W. McKinney · IEEE Security & Privacy · 2007
The commoditization of bugs is a long-standing tradition in the software industry. It started when companies began offering a cash incentive for each critical bug a developer squashed. This practice of attaching intrinsic monetary value to bugs is the spiritual predecessor of the "pure" vulnerability markets that this article discusses.