????漏洞經(jīng)紀(jì)人

????身份：Endgame公司,，Netragard公司，Vupen公司

????目的：把黑客行為當(dāng)成合法生意

????目標(biāo)：未可知

????特征：找到所謂的“零天攻擊”代碼（zero-day exploit）——即攻擊新軟件的方法,，再把它們賣給政府和其他財(cái)大氣粗的客戶,。

????經(jīng)典案例：去年3月舉行的一次安全會(huì)議上，法國(guó)公司Vupen黑掉了谷歌公司（Google）的Chrome瀏覽器,。這家公司并沒(méi)有（收下6萬(wàn)美元,，）把這項(xiàng)技術(shù)和谷歌分享，而是把代碼賣給了出價(jià)更高的客戶,。

????6. Vulnerability Broker

????Who: Endgame, Netragard, Vupen

????Objective: Hacking as legitimate business

????Targets: Agnostic

????Signature: Finding so-called zero-day exploits -- ways to hack new software, selling them to governments and other deep-pocketed clients

????Classic Case: French firm Vupen hacked Google's (GOOG, Fortune 500) Chrome browser at a security conference last March. Rather than share its technique with the company (and accept a $60,000 award), Vupen has been selling the exploit to higher-paying customers.