Bountychain: Toward decentralizing a bug bounty program with blockchain and ipfs

Alex Hoffman; Phillipe Austria; Chol Hyun Park; Yoohwan Kim

doi:10.2991/ijndc.k.210527.001

Bountychain: Toward decentralizing a bug bounty program with blockchain and ipfs

Alex Hoffman, Phillipe Austria, Chol Hyun Park, Yoohwan Kim

Research output: Contribution to journal › Article › peer-review

4 Scopus citations

Abstract

Bug Bounty Programs (BBPs) play an important role in providing and maintaining security in software applications. These programs allow testers to discover and resolve bugs before the general public is aware of them, preventing incidents of widespread abuse. However, they have shown problems such as organizations providing accountability of reporting bugs and nonrecognition of testers. In this paper, we discuss Bountychain, a decentralized application using Ethereum-based Smart Contracts (SCs) and the Interplanetary File System (IPFS), a distributed file storage system. Blockchain and SCs provide a safe, secure and transparent platform for a BBP. Testers can submit bug reports and organizations can accept or reject the defect via the SCs. Transactions on the blockchain serve as a persistent and transparent record of software bugs, while IPFS serves as a long-term storage system for bug details. Thus, Bountychain ensures organization accountability and allows testers to gain irrefutable recognition.

Original language	English
Pages (from-to)	86-93
Number of pages	8
Journal	International Journal of Networked and Distributed Computing
Volume	9
Issue number	2-3
DOIs	https://doi.org/10.2991/ijndc.k.210527.001
State	Published - Jul 2021
Externally published	Yes

Keywords

Bug bounty
DApps
IPFS
blockchain
decentralized apps

Access to Document

10.2991/ijndc.k.210527.001

Cite this

@article{d6f7e0679ca44dcc89311c2b7ecaf059,

title = "Bountychain: Toward decentralizing a bug bounty program with blockchain and ipfs",

abstract = "Bug Bounty Programs (BBPs) play an important role in providing and maintaining security in software applications. These programs allow testers to discover and resolve bugs before the general public is aware of them, preventing incidents of widespread abuse. However, they have shown problems such as organizations providing accountability of reporting bugs and nonrecognition of testers. In this paper, we discuss Bountychain, a decentralized application using Ethereum-based Smart Contracts (SCs) and the Interplanetary File System (IPFS), a distributed file storage system. Blockchain and SCs provide a safe, secure and transparent platform for a BBP. Testers can submit bug reports and organizations can accept or reject the defect via the SCs. Transactions on the blockchain serve as a persistent and transparent record of software bugs, while IPFS serves as a long-term storage system for bug details. Thus, Bountychain ensures organization accountability and allows testers to gain irrefutable recognition.",

keywords = "Bug bounty, DApps, IPFS, blockchain, decentralized apps",

author = "Alex Hoffman and Phillipe Austria and Park, {Chol Hyun} and Yoohwan Kim",

note = "Publisher Copyright: {\textcopyright} 2021 The Authors. Published by Atlantis Press B.V.",

year = "2021",

month = jul,

doi = "10.2991/ijndc.k.210527.001",

language = "English",

volume = "9",

pages = "86--93",

journal = "International Journal of Networked and Distributed Computing",

issn = "2211-7938",

number = "2-3",

}

TY - JOUR

T1 - Bountychain

T2 - Toward decentralizing a bug bounty program with blockchain and ipfs

AU - Hoffman, Alex

AU - Austria, Phillipe

AU - Park, Chol Hyun

AU - Kim, Yoohwan

PY - 2021/7

Y1 - 2021/7

N2 - Bug Bounty Programs (BBPs) play an important role in providing and maintaining security in software applications. These programs allow testers to discover and resolve bugs before the general public is aware of them, preventing incidents of widespread abuse. However, they have shown problems such as organizations providing accountability of reporting bugs and nonrecognition of testers. In this paper, we discuss Bountychain, a decentralized application using Ethereum-based Smart Contracts (SCs) and the Interplanetary File System (IPFS), a distributed file storage system. Blockchain and SCs provide a safe, secure and transparent platform for a BBP. Testers can submit bug reports and organizations can accept or reject the defect via the SCs. Transactions on the blockchain serve as a persistent and transparent record of software bugs, while IPFS serves as a long-term storage system for bug details. Thus, Bountychain ensures organization accountability and allows testers to gain irrefutable recognition.

AB - Bug Bounty Programs (BBPs) play an important role in providing and maintaining security in software applications. These programs allow testers to discover and resolve bugs before the general public is aware of them, preventing incidents of widespread abuse. However, they have shown problems such as organizations providing accountability of reporting bugs and nonrecognition of testers. In this paper, we discuss Bountychain, a decentralized application using Ethereum-based Smart Contracts (SCs) and the Interplanetary File System (IPFS), a distributed file storage system. Blockchain and SCs provide a safe, secure and transparent platform for a BBP. Testers can submit bug reports and organizations can accept or reject the defect via the SCs. Transactions on the blockchain serve as a persistent and transparent record of software bugs, while IPFS serves as a long-term storage system for bug details. Thus, Bountychain ensures organization accountability and allows testers to gain irrefutable recognition.

KW - Bug bounty

KW - DApps

KW - IPFS

KW - blockchain

KW - decentralized apps

UR - http://www.scopus.com/inward/record.url?scp=85117573515&partnerID=8YFLogxK

U2 - 10.2991/ijndc.k.210527.001

DO - 10.2991/ijndc.k.210527.001

M3 - Article

AN - SCOPUS:85117573515

SN - 2211-7938

VL - 9

SP - 86

EP - 93

JO - International Journal of Networked and Distributed Computing

JF - International Journal of Networked and Distributed Computing

IS - 2-3

ER -

Bountychain: Toward decentralizing a bug bounty program with blockchain and ipfs

Abstract

Keywords

Access to Document

Other files and links

Fingerprint

Cite this