Ethical hazards and safeguards in penetration testing

Shamal Faily; Claudia Iacob; Sarah Field

Ethical hazards and safeguards in penetration testing

Shamal Faily, Claudia Iacob, Sarah Field

School of Computing

Bournemouth University

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

157 Downloads (Pure)

Abstract

Penetration testing entails attacking a system to identify and report insecurity, but doing so without harming the system nor encroaching on the dignity of those affected by it. To improve the interaction between penetration testers and their processes and technology, we need to understand the factors that affect decisions they make with ethical import. This paper presents four ethical hazards faced by penetration testers, and three safeguards that address them. We also present preliminary results validating the hazards and safeguards.

Original language	English
Title of host publication	Proceedings of the 30th International BCS Human Computer Interaction Conference (HCI 2016)
Publisher	BCS Learning and Development
Publication status	Published - 15 Jul 2016
Event	30th International BCS Human Computer Interaction Conference: HCI 2016 - Poole, United Kingdom Duration: 11 Jul 2016 → 15 Jul 2016

Conference

Conference	30th International BCS Human Computer Interaction Conference
Country/Territory	United Kingdom
City	Poole
Period	11/07/16 → 15/07/16

Access to Document

Ethical hazards and safeguards in penetration testingFinal published version, 942 KBLicence: CC BY

Cite this

@inproceedings{ac1f6f0906a04b65abb0c55ec6d3b4c4,

title = "Ethical hazards and safeguards in penetration testing",

abstract = "Penetration testing entails attacking a system to identify and report insecurity, but doing so without harming the system nor encroaching on the dignity of those affected by it. To improve the interaction between penetration testers and their processes and technology, we need to understand the factors that affect decisions they make with ethical import. This paper presents four ethical hazards faced by penetration testers, and three safeguards that address them. We also present preliminary results validating the hazards and safeguards.",

author = "Shamal Faily and Claudia Iacob and Sarah Field",

year = "2016",

month = jul,

day = "15",

language = "English",

booktitle = "Proceedings of the 30th International BCS Human Computer Interaction Conference (HCI 2016)",

publisher = "BCS Learning and Development",

note = "30th International BCS Human Computer Interaction Conference : HCI 2016 ; Conference date: 11-07-2016 Through 15-07-2016",

}

TY - GEN

T1 - Ethical hazards and safeguards in penetration testing

AU - Faily, Shamal

AU - Iacob, Claudia

AU - Field, Sarah

PY - 2016/7/15

Y1 - 2016/7/15

N2 - Penetration testing entails attacking a system to identify and report insecurity, but doing so without harming the system nor encroaching on the dignity of those affected by it. To improve the interaction between penetration testers and their processes and technology, we need to understand the factors that affect decisions they make with ethical import. This paper presents four ethical hazards faced by penetration testers, and three safeguards that address them. We also present preliminary results validating the hazards and safeguards.

AB - Penetration testing entails attacking a system to identify and report insecurity, but doing so without harming the system nor encroaching on the dignity of those affected by it. To improve the interaction between penetration testers and their processes and technology, we need to understand the factors that affect decisions they make with ethical import. This paper presents four ethical hazards faced by penetration testers, and three safeguards that address them. We also present preliminary results validating the hazards and safeguards.

UR - http://www.bcs.org/upload/pdf/ewic-licence.pdf

M3 - Conference contribution

BT - Proceedings of the 30th International BCS Human Computer Interaction Conference (HCI 2016)

PB - BCS Learning and Development

T2 - 30th International BCS Human Computer Interaction Conference

Y2 - 11 July 2016 through 15 July 2016

ER -

Ethical hazards and safeguards in penetration testing

Abstract

Conference

Access to Document

Fingerprint

Cite this