Facebook founder 'Mark Zuckerberg' has started a new program so as to make internet secure for everyone. He has been working continuously for spreading internet all over the world with no security issues in it.
There are large number of bug finding programs run by different companies, who claim to provide prizes for doing so. Now in this run, Mark Zuckerberg as launched a new Program naming "Internet Defense Prize" program and the award for finding the bugs is an exciting prize of $50,000.
Facebook and Usenix have come together and launched this program "Internet Defense Prize" program. This is an award wining superior quality research program. A prototype has to be developed for securing the Internet. This Thursday Facebook announced the annual USENIX Security Symposium in San Diego.
The first prize under the program Internet Defense prize Program was awarded to German researchers for their researches. Both researchers provided approach naming: "Static Detection of Second-Order Vulnerabilities in Web Applications this is approach for finding the vulnerabilities in the security of internet.
Static approach was used by the researchers to detect the 2nd order vulnerabilities in the web applications, These applications are mainly used to harm after being stored on the web server ahead of the time. These 2nd order vulnerabilities involved- allowing an attacker to exploit scripts/payload remotely, uploading these malicious scripts to the targeted web servers.
An Example provided in the papers:
For example explained in papers, XSS attacks target the application's users are worse if the payload is stored in a shared resource and distributed to all the users
Detecting these 2nd order vulnerabilities are very difficult when analyzing of the source code is carried out.
You can read more about this research carried by the German duo following these papers. The researchers awarded are Thorsten Holz and Johannes Dahse of Ruhr University at Bochum, Germany. Both of these were awarded with a prize money of $50,000 by USENIX & Facebook.
The Internet Defense prize program is an ongoing program in which any body can participate by providing protocols, researches in security of internet, find out vulnerabilities in it. Security enthusiasts and researchers have been invited by the Facebook and USENIX to participate in this program and earn award of $50,000.
This award of $50,000 is not fixed as you can earn more than this also if your submission is powerful. Accordingly the prize will also be raised.
Source: The hacker news
