Breadleak

Nigeria's first crowdsourced security and bug bounty company

Comment

Inspiration

  1. Digital Age: It is no longer news that we are in the digital age. Advancement in digital technology is enabling business innovation and agility across the world. Furthermore, the business ecosystem is rapidly evolving in response to the convergence of digital technologies.The inevitable reality is that companies are transforming and everything is connected. With the exponential growth of digital touch-points across different businesses, cyber security now directly affects the resilience of organizations, our economy and our individual safety.

  2. Cyber crime: In Nigeria today, numerous internet assisted crimes are committed daily in various forms such as identity theft, desktop counterfeiting, internet chat room, cyber harassment, fraudulent electronic mails, Automated Teller, Machine spoofing, pornography, piracy, hacking, phishing and spamming. Usually these crimes are committed in forms like sending of fraudulent and bogus financial proposals from cyber criminals to innocent internet users. The increasing rates of cyber crime in the society have become a strong threat to Nigeria’s e-commerce growth and has led to ill- reputation intentionally and consequently denied some innocent Nigerians certain opportunities abroad. Therefore, innocent internet users should inculcate the habit of continuously updating their knowledge about the ever changing nature of ICTs, through this, they can be well informed about the current trends in cyber crimes.

  3. Job creation: The youths in every society is of great importance and concern to that society because they are looked upon as the leaders of tomorrow. It is observed that a sizeable number of cyber criminals in Nigeria fall within the youthful age. The youths at present have discovered different ways of using the internet in doing different types of criminal activities mostly because there's very limited employment oppurtunities within the system.

  4. Code of Ethics for employed hackers:

    Keep private and confidential information gained in your professional work, (in particular as it pertains to client lists and client personal information). Not collect, give, sell, or transfer any personal information (such as name, e-mail address, Social Security number, or other unique identifier) to a third party without client prior consent.

    Protect the intellectual property of others by relying on your own innovation and efforts, thus ensuring that all benefits vest with its originator.

    Disclose to appropriate persons or authorities potential dangers to any ecommerce clients, the Internet community, or the public, that you reasonably believe to be associated with a particular set or type of electronic transactions or related software or hardware.

    Provide service in your areas of competence, being honest and forthright about any limitations of your experience and education. Ensure that you are qualified for any project on which you work or propose to work by an appropriate combination of education, training, and experience.

    Never knowingly use software or process that is obtained or retained either illegally or unethically. Not to engage in deceptive financial practices such as bribery, double billing, or other improper financial practices.

    Use the property of a client or employer only in ways properly authorized, and with the owner’s knowledge and consent.

    Disclose to all concerned parties those conflicts of interest that cannot reasonably be avoided or escaped.

    Ensure good management for any project you lead, including effective procedures for promotion of quality and full disclosure of risk.

    Conduct oneself in the most ethical and competent manner when soliciting professional service or seeking employment, thus meriting confidence in your knowledge and integrity.

    Ensure ethical conduct and professional care at all times on all professional assignments without prejudice.

    Not to neither associate with malicious hackers nor engage in any malicious activities. Not to purposefully compromise or allow the client organization’s systems to be compromised in the course of your professional dealings.

    Ensure all penetration testing activities are authorized and within legal limits. Not to take part in any black hat activity or be associated with any black hat community that serves to endanger networks.

    Not to be part of any underground hacking community for purposes of preaching and expanding black hat activities.

What it does

"IT TAKES A CROWD TO DEFEAT A CROWD - Cybersecurity isn’t a technology problem — it’s a human one — and to compete against an army of adversaries we need an army of allies.” Breadleak is a comprehensive penetration testing and a continuous security platform scaled by the world’s most skilled ethical hackers and AI technology.

  1. DEFINE: Design your program You define the attack surfaces you need to harden, for example web application front ends or a mobile application.

  2. PUBLISH: Connect to The Crowd Depending on the type of program, you either publish the program broadly to the researcher community, or engage a more limited set of researchers in a private “invite only” program.

  3. TRIAGE: Find Vulnerabilities As vulnerabilities are uncovered by the researchers, they are triaged to determine validity and severity.

  4. REWARD: Incentivize Results You pay a reward (or grant public “kudos”) to the researcher for finding the problem, patch the vulnerability, and verify that the attack vector has been closed.

WHY BUG BOUNTY AND CROWDSOURCED SECURITY

1.True Risk Reduction for organizations; partnering with an established crowdsourced security platform largely eliminates overhead and maximizes risk reduction.

  1. Crowdsourced security supports the most critical attack surfaces: web and APIs interfaces on server/cloud, mobile and IoT platforms.

  2. Highly vetted, trusted security researchers and private programs diffuse concerns of risk associated with crowdsourced security.

How I built it

Partnered up with a team on Naijahacks to come up on delivering this solution to Nigeria and across Africa.

Challenges I ran into

Understanding the problem, getting active team members, innovating the idea to suit African communities, developing the product.

Accomplishments that I'm proud of

Finding a team and using this solution to battle cybercrime rate and unemployment oppurtunities in Nigeria which the system as a whole can benefit from.

What I learned

Teamwork, leadership, communication, mindsets, pitching, forming an idea

What's next for Breadleak

Educating the youths, Cyber-security hackathons and events, Internationally endorsed collaborations, emergence into other African countires.

Share this project:

Updates