Throwing money at bug bounties won't beat zero-day dark markets

Study shows tools and bragging rights key to beating criminals

RSA 2015 The first academic study into the market for zero-day flaws has shown some surprising results, not least that throwing money at ever-larger bug bounty payouts might well be counterproductive."