摘要:Some software developers sponsor bug bounty programs, whereby outside parties with comparatively lower costs are
compensated for finding bugs. We propose a basic model of why some developers offer bounties while others don't,
and why those that do offer bounties typically outsource only a portion of the bug-finding. Our relatively basic
framework and preliminary result can support further investigation of public policy instruments, such as products
liability law, aimed at modulating software failures that may have large public impacts.