Ethical Principles for Designing Responsible Offensive Cyber Security Training - Privacy and Identity Management
Conference Papers Year : 2021

Ethical Principles for Designing Responsible Offensive Cyber Security Training

Abstract

In this paper we present five principles for designing ethically responsible offensive cyber security training. The principles can be implemented in existing or new study plans and target both academic and non-academic courses. Subject matter experts within various cyber security domains were consulted to validate and fine tune the principles, together with a literature review of ethical studies in related domains. The background for designing the principles is the continuous popularity of offensive cyber security (penetration testing, ethical hacking). Offensive cyber security means actively trying to break or compromise a system in order to find its vulnerabilities. If this expertise is placed in the wrong hands, the person can cause severe damage to organizations, civilians and society at large. The proposed ethical principles are created in order to mitigate these risks while maintaining the upsides of offensive cyber security. This is achieved by incorporating the ethical principles in offensive cyber security training, in order to facilitate the practitioners with ethical knowledge of how and when to use their acquired expertise.
Fichier principal
Vignette du fichier
498598_1_En_2_Chapter.pdf (175.36 Ko) Télécharger le fichier
Origin Files produced by the author(s)

Dates and versions

hal-03703771 , version 1 (24-06-2022)

Licence

Identifiers

Cite

Fredrik Heiding, Robert Lagerström. Ethical Principles for Designing Responsible Offensive Cyber Security Training. 15th IFIP International Summer School on Privacy and Identity Management (Privacy and Identity), Sep 2020, Maribor, Slovenia. pp.21-39, ⟨10.1007/978-3-030-72465-8_2⟩. ⟨hal-03703771⟩
47 View
39 Download

Altmetric

Share

More