55 citations · 55 across the 10 of their papers we have counts for
Showing 2024 · cs.CRShow all
2 papers · 2 filters
cs.CR2024
Sound and Fury, Signifying Nothing? Impact of Data Breach Disclosure Laws
Muhammad Zia Hydari, Yangfan Liang, Rahul Telang
Data breach disclosure (DBD) is presumed to improve firms' cybersecurity practices by inducing fear of subsequent revenue loss. This revenue loss, the theory goes, will occur if cu…
cs.CR2024
Merchants of Vulnerabilities: How Bug Bounty Programs Benefit Software Vendors
Esther Gal-Or, Muhammad Zia Hydari, Rahul Telang
We study how bug bounty programs (BBPs) shape software vendors' security and release choices. We develop a game-theoretic model in which a vendor chooses release timing and severit…