[ANN][ICO] Secure Planet - Github for IoT Security

[secureplanetio]

Featured on RFID Journal: Better IoT Security Through Crowdsourced, Blockchain-Driven Platforms
https://secureplanet.io/1494/featured-on-rfid-journal-better-iot-security-through-crowdsourced-blockchain-driven-platforms

We were featured on RFID Journal. Check out the link above for an abridgement of our bylined article, “Better IoT Security Through Crowdsourced, Blockchain-Driven Platforms,” written by Secure Planet’s CEO Tae-Jin (TJ) Kang.

[1714980417]

1714980417

[1714980417]

1714980417

[lilaj4de]

Will the incentive for new vulnerability discoveries, the award, or the amount of tokens to be gained, be consistent with the complexity of the vulnerability encountered?

[secureplanetio]

Will the incentive for new vulnerability discoveries, the award, or the amount of tokens to be gained, be consistent with the complexity of the vulnerability encountered?

The amount of tokens Secure Planet awards to contributors will vary depending on each individual case.

Two major factors will determine the amount of awarded tokens. They are as follows:

• Popularity of the open source software containing the vulnerability - the higher the usage and/or adoption rate of the open source project, the higher the token amount

• Vulnerability severity ranking - the more critical the vulnerability, the higher the token amount

[secureplanetio]

Featured on ZDNet: Using Blockchain to Detect Open Source Security Vulnerabilities
https://secureplanet.io/1508/featured-on-zdnet-using-blockchain-to-detect-open-source-security-vulnerabilities

Secure Planet was featured on ZDNet Korea. The article includes a Q&A with Secure Planet’s CEO Tae-Jin (TJ) Kang, COO Taek Wan Kim, and Chief Security Strategist Mike Pittenger.

[secureplanetio]

Mike Pittenger and Claus-Peter Wiedemann at Secure Planet Technology Workshop
https://secureplanet.io/1532/mike-pittenger-and-claus-peter-wiedemann-at-secure-planet-technology-workshop

Earlier this month, we hosted a week-long Secure Planet technology workshop at our home office. We were fortunate enough to have our Chief Security Strategist Mike Pittenger and advisor Claus-Peter Wiedemann fly in from the U.S. and Germany respectively to participate in the event.

[secureplanetio]

Meet Andrew Jang – CSO of Secure Planet
https://secureplanet.io/1550/meet-andrew-jang-cso-of-secure-planet

The Secure Planet team consists of entrepreneurs and industry professionals with expertise in the areas of technology, open source software, security, and venture capital. Andrew Jang handles the communication for and execution of all our strategic initiatives.

[secureplanetio]

Secure Planet Releases White Paper – Available on Our Website!
https://secureplanet.io/1568/secure-planet-releases-white-paper-available-on-our-website

The Secure Planet white paper delves into the inherent issues of Open Source Software (OSS). In particular, the lack of incentive to fix publicly known security flaws. It explains, in depth, how the SPX tokenomics has been designed to incentivize the active reporting and remediation of vulnerabilities. The white paper will act as the primary manifesto for the next generation of IoT device security.

[carloff]

Thanks for the info.

[secureplanetio]

Secure Planet FAQ #1: How Many Tokens Can I Earn as a Contributor?
https://secureplanet.io/1586/secure-planet-faq-1-how-many-tokens-can-i-earn-as-a-contributor

The popularity of the open source software project and the severity of the detected vulnerability will determine the amount of tokens a contributor can earn.

[secureplanetio]

Secure Planet on Coin Interview – November 6 @ 7PM Pacific Time
https://secureplanet.io/1602/secure-planet-on-coin-interview-november-6-7pm-pacific-time

Tune in to watch the Q&A with our CSO Andrew Jang and learn more about Secure Planet’s mission, technology, and next steps.
https://www.youtube.com/watch?v=qsOSpCiwvzk

[secureplanetio]

Bite-Sized White Paper #1: IoT Security Trends and Challenges
https://secureplanet.io/1614/bite-sized-white-paper-1-iot-security-trends-and-challenges

The Bite-Sized White Paper series breaks down the Secure Planet white paper into shorter, digestible pieces so our readers can better understand what drives our mission.

[secureplanetio]

Bite-Sized White Paper #2: Open Source Software is a Low Hanging Fruit
https://secureplanet.io/1627/bite-sized-white-paper-2-open-source-software-is-a-low-hanging-fruit

In the second edition of these series, we weigh the merits of open source software against its risks - the combination of which make it a low-hanging fruit for hackers.

[Nightz]

Will the incentive for new vulnerability discoveries, the award, or the amount of tokens to be gained, be consistent with the complexity of the vulnerability encountered?

The amount of tokens Secure Planet awards to contributors will vary depending on each individual case.

Two major factors will determine the amount of awarded tokens. They are as follows:

• Popularity of the open source software containing the vulnerability - the higher the usage and/or adoption rate of the open source project, the higher the token amount

• Vulnerability severity ranking - the more critical the vulnerability, the higher the token amount

Who decides whether a discovered vulnerability is severe or not? That's a process that can hardly be judged highly objectively. What does the scale for the ranking look like?

[secureplanetio]

How Can Blockchain Technology Prevent IoT Security Breaches?
https://secureplanet.io/1636/how-can-blockchain-technology-prevent-iot-security-breaches

Blockchain promises individuals control over their own information, which is why Secure Planet will leverage this technology to create our vulnerability database.

[secureplanetio]

Will the incentive for new vulnerability discoveries, the award, or the amount of tokens to be gained, be consistent with the complexity of the vulnerability encountered?

The amount of tokens Secure Planet awards to contributors will vary depending on each individual case.

Two major factors will determine the amount of awarded tokens. They are as follows:

• Popularity of the open source software containing the vulnerability - the higher the usage and/or adoption rate of the open source project, the higher the token amount

• Vulnerability severity ranking - the more critical the vulnerability, the higher the token amount

Who decides whether a discovered vulnerability is severe or not? That's a process that can hardly be judged highly objectively. What does the scale for the ranking look like?

The severity of the security vulnerabilities, like the reporting of vulnerabilities themselves, will be determined through a crowdsourced voting process. Voting will take place for ten days and contributors must vote for one of two outcomes: 1) yes, the vulnerability is accurate and should be included in the database, or 2) no, the vulnerability not accurate and should be rejected from the database.

The “Yes” voters must also assign the “Vulnerability Score” using the CVSS calculator at
https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Their submissions will be averaged out to derive the official Vulnerability Score.

Once Secure Planet reveals the majority vote, the verifiers who voted on the winning outcome will be rewarded with SPX and Rep Tokens. Verifiers who chose the losing vote will lose Rep Tokens and receive no SPX.

[secureplanetio]

Bite-Sized White Paper #3: The First Bug Bounty Program for Open Source
https://secureplanet.io/1660/bite-sized-white-paper-3-the-first-bug-bounty-program-for-open-source

In this edition of the Bite-Sized White Paper series, we explore the need in the market for a security solution that prioritizes OSS – and how Secure Planet can fill this gap.

[secureplanetio]

Secure Planet FAQ #2: Who Determines the Severity of a Vulnerability?
https://secureplanet.io/1670/secure-planet-faq-2-who-determines-the-severity-of-a-vulnerability

The severity of the security vulnerabilities, like the collection of vulnerabilities themselves, will be determined through a crowdsourced voting process.

[Nightz]

Will the incentive for new vulnerability discoveries, the award, or the amount of tokens to be gained, be consistent with the complexity of the vulnerability encountered?

The amount of tokens Secure Planet awards to contributors will vary depending on each individual case.

Two major factors will determine the amount of awarded tokens. They are as follows:

• Popularity of the open source software containing the vulnerability - the higher the usage and/or adoption rate of the open source project, the higher the token amount

• Vulnerability severity ranking - the more critical the vulnerability, the higher the token amount

Who decides whether a discovered vulnerability is severe or not? That's a process that can hardly be judged highly objectively. What does the scale for the ranking look like?

The severity of the security vulnerabilities, like the reporting of vulnerabilities themselves, will be determined through a crowdsourced voting process. Voting will take place for ten days and contributors must vote for one of two outcomes: 1) yes, the vulnerability is accurate and should be included in the database, or 2) no, the vulnerability not accurate and should be rejected from the database.

The “Yes” voters must also assign the “Vulnerability Score” using the CVSS calculator at
https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L. Their submissions will be averaged out to derive the official Vulnerability Score.

Once Secure Planet reveals the majority vote, the verifiers who voted on the winning outcome will be rewarded with SPX and Rep Tokens. Verifiers who chose the losing vote will lose Rep Tokens and receive no SPX.

Does anyone hold a majority in the network in the beginning or is the network more or less evenly distributed?

[secureplanetio]

How to Whitelist The Secure Planet Team
https://secureplanet.io/1704/how-to-whitelist-the-secure-planet-team

If you experience trouble viewing Secure Planet newsletters in your main inbox, read on to find out how to whitelist our email address – secureplanet@secureplanet.io – for Gmail and Outlook.

[secureplanetio]

Featured on JoongAng Ilbo: Using Blockchain to Address Open Source Security Vulnerabilities
https://secureplanet.io/1711/featured-on-joongang-ilbo-using-blockchain-to-address-open-source-security-vulnerabilities

Joongang Ilbo sits down with our CEO Tae-Jin Kang to discuss Secure Planet, as well as his experiences that led to the development of our initiative.