31. The computer vulnerability discovery system of claim 24 , further comprising: storage for flow records based upon packet flow identifiers; and storage for packets, segments, messages or request-response pairs based upon 5-tuple identifying data.
24. A computer vulnerability discovery system comprising: interfaces to a plurality of researcher computers; control logic logically interposed between a researcher computer of the plurality of researcher computers and one or more target systems, wherein the researcher computer is a computer operated by, or to be operated by, an invited researcher, wherein an invited researcher is a person or organization selected to participate in one or more computer vulnerability research projects directed to researching and/or identifying computer vulnerabilities of the one or more target systems comprising one or more network component and/or one or more computer component; storage for access credentials for a management computer associated with the control logic to allow access to the control logic by particular ones of the plurality of researcher computers; storage for data about an assignment of a particular computer vulnerability research project of the one or more computer vulnerability research projects to the researcher computer or to the invited researcher, wherein the particular computer vulnerability research project relates to a particular target system; an interface for a communications path between the control logic and the particular target system; a monitor, coupled to the control logic, for monitoring networked data communications between the researcher computer and the particular target system, wherein the networked data communications include communications that are usable to identify a candidate vulnerability of the particular target system; storage for data about a candidate vulnerability of the particular target system based on a report received from the invited researcher resulting from the invited researcher's use of the researcher computer to interact with the particular target system via the control logic; storage for validation data about the report of the candidate vulnerability of the particular target system, including data about attempted duplication of the candidate vulnerability after receiving the report; and an output for providing a message triggering one or more remediation operations on the particular target system based at least in part upon the report.