In 2014, Microsoft's Trustworthy Computing (TwC) division started the Secure Development Lifecyle (SDL) initiative. With this, the tech company introduced a software development process that's used by Microsoft itself to maintain costs and increase the reliability of software with regards to security-related bugs. The following diagram illustrates this process:
Tech companies and governments started working together to deliver a platform for a responsible vulnerability disclosure process. In addition, many tech companies started rewards programs, offering money for newly discovered vulnerabilities. As an example, Google started the Google Vulnerability Reward Program (VRP) where the reward for qualifying bugs ranged between $100 to $31,337 US dollars.
There have been many attempts to standardize vulnerability management. One of the most common...
