Paying bug bounties is more cost-effective than a security team, study finds
07/10/13 PC World — Paying rewards to independent security researchers for finding software problems is a vastly better investment than hiring employees to do the same work, according to UC Berkeley computer science researchers who studied vulnerability reward programs run by Google and Mozilla.