OWASP Switzerland: Bug Bounty programs in Switzerland?

We'd like to invite you to our next OWASP Switzerland meeting. If you want to attend, please make sure to register for the event. Space is limited to 30 attendees.

When: Tuesday, October 4th 2016

• 17:30 | Doors will open

• 18:00 – 18:15 | Update on OWASP

• 18:20 – 19:30 | Talk & Discussion

• 19:30– **:** | Dinner

What: "Bug Bounty programs in Switzerland?" by Florian Badertscher (Swisscom):

Talk:

For over a year now Swisscom runs its own Bug Bounty program and has chosen to follow a different approach than many of the other well-known programs. Learn what it takes to set up the program, keep it running in a highly diverse environment and deal with the different needs and limitations from a Telco, ISP and IT Services perspective. We will share insights into the program and the real value it delivers to the company, in addition to the vulnerabilities you learn about.

Discussion:

You are a critical thinker (who ideal (him-)herself has reported findings to some kind of "bug bounty program"), a penetration tester, some coloured hat or simply interested in this topic? Then please attend our next meeting and bring along your questions, thoughts and own experiences with responsible disclosure programs.

Flo is looking forward to discussions around questions like:

• What are your concrete requirements / expectations to a bug bounty program, what are your experiences participating in these?

•  How does your responsible disclosure program work (if there is one)?

• What pitfalls did you step in?

• What are your experiences with companies like Hackerone or Bugcrowd?

Who:

As usual, all of our meetings are open to everyone and free of charge.

Dinner:

This time no official dinner is planned. If you still would like to grab a bite afterwards, simply stay a little longer after the meeting and we will form up a group of hungry people. ;)

More:

Keep yourself informed and up-to-date by subscribing to our (low-traffic) mailinglist.