
8 n Cyber Fraud: Tactics, Techniques, and Procedures
into their respective programs. Convincing security researchers to disclose details about their
vulnerability findings and release the intellectual property rights to these findings is not an easy
task. e security research community is fairly small and it tends to be highly concerned about pri-
vacy and anonymity, so researchers must trust the people with whom they are working. erefore,
much of the recruiting for the VCP, DACP, GVP, and ZDI is done through word of mouth. e
iDefense and TippingPoint programs also advertise their programs at “hacker” conferences such as
Black Hat a ...