| 词条 | Vupen |
| 释义 |
| name = Vupen Security | type = Société anonyme | foundation = {{Start date|2004}} | defunct = {{End date|2015|05|05}}[1] | founder = Chaouki Bekrar | location_city = Montpellier | location_country = France | website = hide | area_served = Information security, Espionage }} Vupen Security was a French information security company founded in 2004 and based in Montpellier with a U.S. branch based in Annapolis, Maryland. Its specialty was in discovering zero-day vulnerabilities in software from major vendors in order to sell them to law enforcement and intelligence agencies which use them to achieve both defensive and offensive cyber-operations.[2] Vupen ceased trading in 2015, and the founders created a new company Zerodium. WorkIn 2011, 2012, 2013 and 2014 Vupen won first prize in the hacking contest Pwn2Own, most notably in 2012 by exploiting a bug in Google Chrome. Their decision not to reveal the details of the vulnerability to Google, but rather to sell them, was controversial.[3] Unlike 2012, during Pwn2Own 2014, Vupen decided to reveal to the affected vendors, including Google, all its exploits and technical details regarding the discovered vulnerabilities, which led to the release of various security updates from Adobe, Microsoft, Apple, Mozilla, and Google to address the reported flaws. According to the French registrar of companies,[1] Vupen earned a net profit of €1,283,000 in 2014. Some years ago Vupen was still providing information about vulnerabilities in software for free, but then decided to earn money with its services. "The software companies had their chance", said Vupen-founder Chaouki Bekrar according to the article, "now it's too late".[2] On 15 September 2013, it was revealed that the NSA was a client of Vupen and had a subscription to its exploit service.[3] On 9 November 2014, the German magazine Der Spiegel reported that the German information security agency BSI, tasked with the protection of federal government networks, was also a client of Vupen.[4] On 22 July 2015, it was revealed that Vupen provided exploits to Hacking Team between 2010 and 2011.[5] On 5 May 2015, Vupen headquarters filed documents ceasing its operations.[6] Zerodium{{see also|Zerodium}}On 23 July 2015, Vupen's founders launched a new US cybersecurity company named Zerodium and having a different business model as it acquires exclusive zero-day discoveries from independent researchers and reports them, along with protective measures and security recommendations, to its corporate and government clients.[7] References1. ^[https://www.infogreffe.fr/societes/entreprise-societe/478502123-vupen-security-340504B015940000.html Registre des sociétés], Infogreffe [8][9]2. ^Philipp Alvares de Souza Soares: Cyberspionage: Durch die Hintertuer, in: Die Zeit October 2nd 2013. 3. ^NSA Contracted With Zero-Day Vendor Vupen, Darkreading 4. ^BND will Informationen ueber Software-Sicherheitsluecken einkaufen, in: Der Spiegel November 9th 2014. 5. ^[https://tsyrklevich.net/2015/07/22/hacking-team-0day-market/ Hacking Team: a zero-day market case study], Vlad Tsyrklevich's blog 6. ^1 Registre des sociétés, Societe.com 7. ^{{cite web | last = Fisher | first = Dennis | title = VUPEN Founder Launches New Zero-Day Acquisition Firm Zerodium | publisher = ThreatPost.com | date = July 24, 2015 | url = https://threatpost.com/vupen-launches-new-zero-day-acquisition-firm-zerodium/113933/ | accessdate = November 3, 2015}} 8. ^1 {{cite journal | author = Andy Greenberg | title = Meet The Hackers Who Sell Spies The Tools To Crack Your PC (And Get Paid Six-Figure Fees) | work = Forbes |date=21 March 2012 | url = https://www.forbes.com/sites/andygreenberg/2012/03/21/meet-the-hackers-who-sell-spies-the-tools-to-crack-your-pc-and-get-paid-six-figure-fees/}} 9. ^1 {{cite journal | url = https://www.wired.com/threatlevel/2012/03/how-to-pwn-the-pwn2own-contest/| author = Kim Zetter| date=3 September 2012| work = Wired| title = How to Pwn the Pwn2Own Contest}} }}{{Portal|Computer_security}} 4 : Companies based in Languedoc-Roussillon|Computer security companies|Information technology companies of France|Companies established in 2004 |
| 随便看 |
|
开放百科全书收录14589846条英语、德语、日语等多语种百科知识，基本涵盖了大多数领域的百科知识，是一部内容自由、开放的电子版国际百科全书。