http://weis2007.econinfosec.org/papers/29.pdf Old (2007 ) paper by Charlie Miller about trading of 0-day exploits