Votipka D, Stevens R, Redmiles E, et al. Hackers vs. testers: A comparison of software vulnerability discovery processes[C]//2018 IEEE Symposium on Security and Privacy (SP). IEEE, 2018: 374-391.
http://users.umiacs.umd.edu/~dvotipka/papers/VotipkaHackerTesters2018.pdf