Abstract

The 0-day vulnerability market developed over the years in a way that is unsafe, chaotic and rather inefficient. Bad business practices, lack of professionalism and low levels of trust are still spread in this market even today and can seriously hamper the ability of Law Enforcement and Intelligence Agencies to acquire and maintain strategic cyber capabilities in order to fight organized crime, terrorism and hostile geopolitical actors.

Having a deep understanding of these issues and of their solutions, Crowdfense is “hacking the 0day market” to create a better working environment for all the parties involved (researchers, brokers, integrators and end users), by introducing new platforms (as the Vulnerability Research Hub and the upcoming Vulnerability Research Marketplace) and new quality standards / best practices related to products and services, in order to improve significantly the sustainability of the underlying business processes.

This session will share how Crowdfense is doing this, why, what are the results, some statistics about the 0-day market and what our next steps are going to be.