The fifth US Department of Defense bug bounty program, launched with HackerOne, will target a DoD enterprise system used by millions.
The US Department of Defense and HackerOne have announced a new DoD bug bounty program, "Hack the DTS," which will let vetted white-hat hackers take aim at the Defense Travel System, an enterprise platform used by millions of employees to book work-related travel.
This is the fifth bug bounty challenge the two have created since 2016, when the inaugural
Hack the Pentagon program let participants hunt for vulnerabilities in DoD websites, applications, and networks. Hack the DTS opened registration on April 1, 2018 and will conclude on April 29.
"The scale of users, volume of travel booked, and sensitive information it is responsible for maintaining makes DTS both a compelling asset for researcher and a priority for DoD to harden its security," says Reina Staley, chief of staff and co-founder at Defense Digital Service, who says this program will have the same execution as earlier ones but "inevitably yield unique findings."
Eligible participants must be US taxpayers and either citizens of, or eligible to work in, the United Kingdom, Canada, Australia, or New Zealand. Proof of citizenship is required to register.
Active US military members and contractors can join the challenge if they're eligible but can't receive financial rewards. Anyone who submits a vulnerability report must undergo a security and criminal background check before they are rewarded for their findings, HackerOne
reports.
....
....
....
