Microsoft ya biya $374 a matsayin lada ga masu binciken tsaro na bayanai a zaman wani ɓangare na Kalubalen Binciken Tsaro na Azure Sphere, wanda ya ɗauki tsawon watanni uku. Yayin binciken, ƙwararrun sun sami damar gano mahimman raunin tsaro guda 300 waɗanda aka gyara a cikin sabuntawar 20, 20.07 da 20.08. Kimanin masu bincike 20.09 daga kasashe 70 ne suka halarci gasar.
A wani bangare na binciken, Microsoft ya gayyaci manyan masana harkar tsaro ta yanar gizo da masu samar da tsaro da su yi kokarin kutse na'urori ta hanyar amfani da nau'ikan hare-haren da maharan ke yawan amfani da su. An ba masu fafatawa da kayan haɓakawa, sadarwa kai tsaye tare da ƙungiyar tsaro ta OS, tallafin imel, da lambar kwaya ta jama'a don tsarin aiki.
Manufar gasar ita ce mayar da hankali ga masu bincike kan abin da ke da tasiri mafi girma ga lafiyar abokin ciniki. Don haka, an ba ƙwararrun al'amuran bincike shida tare da ƙarin lada har zuwa 20% sama da daidaitattun ladan Azure Bounty (har zuwa $40), da kuma $000 don al'amura biyu masu fifiko.
Masu ba da gudummawa da yawa sun taimaka gano haɗarin haɗari a cikin Azure Sphere. Gasar ta sami jimlar shigarwar 40, 30 daga cikinsu sun haifar da haɓaka samfuran. 374 daga cikinsu sun cancanci samun lambobin yabo, wanda adadinsu ya kai $300.
An gudanar da binciken tare da haɗin gwiwar Avira, Baidu International Technology, Bitdefender, Bugcrowd, Cisco Systems Inc (Talos), ESET, FireEye, F-Secure Corporation, HackerOne, K7 Computing, McAfee, Palo Alto Networks da Zscaler.
source: www.habr.com