Title
Penetration Testing Professional Ethics: A Conceptual Model And Taxonomy
Abstract
In an environment where commercial software is continually patched to correct security flaws, penetration testing can provide organisations with a realistic assessment of their security posture. Penetration testing uses the same principles as criminal hackers to penetrate corporate networks and thereby verify the presence of software vulnerabilities. Network administrators can use the results of a penetration test to correct flaws and improve overall security. The use of hacking techniques, however, raises several ethical questions that centre on the integrity of the tester to maintain professional distance and uphold the profession. This paper discusses the ethics of penetration testing and presents our conceptual model and revised taxonomy.
Year
DOI
Venue
2006
10.3127/ajis.v13i2.52
AUSTRALASIAN JOURNAL OF INFORMATION SYSTEMS
Keywords
Field
DocType
Penetration testing, computer security and computer ethics
Professional ethics,Information ethics,Conceptual model,Computer science,Computer security,Software security assurance,Commercial software,Hacker,Computer ethics,Penetration test,Management science
Journal
Volume
Issue
ISSN
13
2
1449-8618
Citations 
PageRank 
References 
4
0.58
4
Authors
3
Name
Order
Citations
PageRank
Justin D. Pierce141.25
Ashley Jones240.58
Matthew J. Warren317450.28