The Ministry of Digital Development, Communications and Mass Media of the Russian Federation announced the launch of a reward program for found vulnerabilities on the State Services portal, as well as other e-government resources. This project is planned to be carried out in several stages. First, the State Services and the Unified Identification and Authentication System (ESIA) will be checked by independent researchers within three months. Then the department will expand the list of resources and update the conditions of the program. Payments to participants will depend on the degree of vulnerability found, the total fund will be 10 million rubles. Bug Bounty is sponsored by Rostelecom.
For bugs with a low level, they promise gifts with the symbols of the project, medium vulnerabilities are estimated at up to 50 thousand rubles, and high ones – from 50 to 200 thousand rubles. For the discovery of critical vulnerabilities, program participants can receive up to a million rubles. Testing takes place on the BI.ZONE and Positive Technologies platforms.
To participate in Bug Bounty, you must register on the selected platform. As soon as the participant finds a vulnerability, he must send the relevant information through the platform and wait for confirmation from the Ministry of Digital Development. If all the rules are met, the organizers will make a payment. The Ministry of Digital Development noted that work on the platform will allow determining the logic of potential hackers, this data will be used for additional protection of information systems.
The Public Services Bug Bounty was announced back in October 2022, but there were no details at that time. According to the department, last year, compared to the previous year, the number of attempts to hack government resources increased by 80%. And according to Positive Technologies, in 2022, hackers carried out more than 400 attacks on government institutions.
Source: Trash Box
I’m Meagan Diaz, a news writer and author at World Stock Market. My main focus is on technology and stock market trends, and I’m passionate about helping readers stay informed on the ever-changing landscape. I bring extensive knowledge of the industry to my work as well as a knack for storytelling that makes my articles both accessible and engaging.
