Google announce Android Security Rewards program as extension to Patch Rewards Program
Google’s has announced a new Android Security Rewards program that is an extension to the Patch Rewards Program that lets Google Pay to security researchers who find vulnerabilities in Chrome and other Google products. Google has already paid 1.5 million dollars to security researchers till date. The new program will pay to security researchers for finding vulnerabilities in Android.
For those who vulnerabilities affecting Nexus devices that are available on sale on Google Play Store, Google will pay for each step required to fix a security bug that includes patching and testing. Given the precedence for Nexus devices, Google is trying to make sure that Nexus lineup will get the security loopholes and bugs fixes as early as possible. The program also offers rewards to researchers who invest in tests and patches that makes the Android ecosystem stronger. The biggest pay is to those who demo how to work around platform security features (ASLR, NX, sandboxing) that are designed to prevent exploitation.
